spam zombie!!! how can i stop this

baldor

Active Member
Oct 3, 2004
26
0
151
a program sending spam mail from my server, on WHM Mail Queue Manager page i can see them. how can i find zombie program?

os: redhat enterprise 3 with cpanel/whm
 

baldor

Active Member
Oct 3, 2004
26
0
151
no body know anything about this?

how can i stop sending spam mail from my server? please help :confused:
 

mctDarren

Well-Known Member
Jan 6, 2004
665
8
168
New Jersey
cPanel Access Level
Root Administrator
Try doing "top c" to see if you can pinpoint the script name - it's probably using quite a bit of resources and most likely a perl or php script. Get a PID from one of the instances and do "lsof -p PID" where PID is the one from your top command. That should tell you where the script is running. Change attributes on the script so that it cannot run, suspend the account then examine the script to make sure that was all that it was doing.

Hope that helps :)