The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

spamd child(continual)

Discussion in 'General Discussion' started by novaworld1, Apr 9, 2013.

  1. novaworld1

    novaworld1 Registered

    Joined:
    Mar 26, 2013
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    hi
    no idea why this is happening not long appeared now I am emailed all the time about it
    any idea please as to what these are




    never had it all appear before I've not altered antyhing but baffling me this is

    Code:
    
    
    Executable:
    
    /usr/local/cpanel/3rdparty/perl/514/bin/perl
    
    
    Command Line (often faked in exploits):
    
    spamd child
    
    
    Network connections by the process (if any):
    
    tcp: 127.0.0.1:783 -> 0.0.0.0:0
    tcp: 127.0.0.1:783 -> 127.0.0.1:40095
    
    
    Files open by the process (if any):
    
    /dev/null
    /dev/null
    /dev/null
    /usr/local/cpanel/3rdparty/perl/514/bin/spamd
    
    
    Memory maps by the process (if any):
    
    00110000-00138000 r-xp 00000000 09:03 149209575                          /lib/libm-2.12.so
    00138000-00139000 r--p 00027000 09:03 149209575                          /lib/libm-2.12.so
    00139000-0013a000 rw-p 00028000 09:03 149209575                          /lib/libm-2.12.so
    0013a000-002ca000 r-xp 00000000 09:03 149209481                          /lib/libc-2.12.so
    002ca000-002cb000 ---p 00190000 09:03 149209481                          /lib/libc-2.12.so
    002cb000-002cd000 r--p 00190000 09:03 149209481                          /lib/libc-2.12.so
    002cd000-002ce000 rw-p 00192000 09:03 149209481                          /lib/libc-2.12.so
    002ce000-002d1000 rw-p 00000000 00:00 0 
    002d1000-0031a000 r-xp 00000000 09:03 149209565                          /lib/libfreebl3.so
    0031a000-0031b000 r--p 00048000 09:03 149209565                          /lib/libfreebl3.so
    0031b000-0031c000 rw-p 00049000 09:03 149209565                          /lib/libfreebl3.so
    0031c000-00320000 rw-p 00000000 00:00 0 
    00320000-00324000 r-xp 00000000 09:03 149357335                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/cpanel_lib/i386-linux-64int/auto/Socket6/Socket6.so
    00324000-00325000 rw-p 00003000 09:03 149357335                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/cpanel_lib/i386-linux-64int/auto/Socket6/Socket6.so
    00325000-0032c000 r-xp 00000000 09:03 149209844                          /lib/librt-2.12.so
    0032c000-0032d000 r--p 00006000 09:03 149209844                          /lib/librt-2.12.so
    0032d000-0032e000 rw-p 00007000 09:03 149209844                          /lib/librt-2.12.so
    0032e000-00330000 r-xp 00000000 09:03 149325133                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/cpanel_lib/i386-linux-64int/auto/MIME/Base64/Base64.so
    00330000-00331000 rw-p 00001000 09:03 149325133                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/cpanel_lib/i386-linux-64int/auto/MIME/Base64/Base64.so
    00331000-00339000 r-xp 00000000 09:03 149348588                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/cpanel_lib/i386-linux-64int/auto/HTML/Parser/Parser.so
    00339000-0033a000 rw-p 00007000 09:03 149348588                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/cpanel_lib/i386-linux-64int/auto/HTML/Parser/Parser.so
    0033a000-0033b000 r-xp 00000000 09:03 149348769                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/cpanel_lib/i386-linux-64int/auto/Net/DNS/DNS.so
    0033b000-0033c000 rw-p 00001000 09:03 149348769                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/cpanel_lib/i386-linux-64int/auto/Net/DNS/DNS.so
    0033c000-0036d000 r-xp 00000000 09:03 149209487                          /lib/libidn.so.11.6.1
    0036d000-0036e000 rw-p 00030000 09:03 149209487                          /lib/libidn.so.11.6.1
    0036e000-00377000 r-xp 00000000 09:03 149332586                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/cpanel_lib/i386-linux-64int/auto/Digest/SHA/SHA.so
    00377000-00378000 rw-p 00008000 09:03 149332586                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/cpanel_lib/i386-linux-64int/auto/Digest/SHA/SHA.so
    00378000-0037e000 r-xp 00000000 09:03 149325147                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/cpanel_lib/i386-linux-64int/auto/Data/Dumper/Dumper.so
    0037e000-0037f000 rw-p 00005000 09:03 149325147                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/cpanel_lib/i386-linux-64int/auto/Data/Dumper/Dumper.so
    0037f000-00381000 r-xp 00000000 09:03 149325057                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/cpanel_lib/i386-linux-64int/auto/Cwd/Cwd.so
    00381000-00382000 rw-p 00001000 09:03 149325057                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/cpanel_lib/i386-linux-64int/auto/Cwd/Cwd.so
    00382000-00384000 r-xp 00000000 09:03 149332747                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/cpanel_lib/i386-linux-64int/auto/Sys/Syslog/Syslog.so
    00384000-00385000 rw-p 00002000 09:03 149332747                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/cpanel_lib/i386-linux-64int/auto/Sys/Syslog/Syslog.so
    00385000-00391000 r-xp 00000000 09:03 149209823                          /lib/libnss_files-2.12.so
    00391000-00392000 r--p 0000b000 09:03 149209823                          /lib/libnss_files-2.12.so
    00392000-00393000 rw-p 0000c000 09:03 149209823                          /lib/libnss_files-2.12.so
    00393000-00397000 r-xp 00000000 09:03 149325043                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/cpanel_lib/i386-linux-64int/auto/List/Util/Util.so
    00397000-00398000 rw-p 00004000 09:03 149325043                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/cpanel_lib/i386-linux-64int/auto/List/Util/Util.so
    00398000-003a1000 r-xp 00000000 09:03 149332803                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/cpanel_lib/i386-linux-64int/auto/DB_File/DB_File.so
    003a1000-003a2000 rw-p 00008000 09:03 149332803                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/cpanel_lib/i386-linux-64int/auto/DB_File/DB_File.so
    003a2000-00515000 r-xp 00000000 09:03 149209379                          /lib/libdb-4.7.so
    00515000-00518000 rw-p 00172000 09:03 149209379                          /lib/libdb-4.7.so
    00518000-0051b000 r-xp 00000000 09:03 149348830                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/cpanel_lib/i386-linux-64int/auto/BSD/Resource/Resource.so
    0051b000-0051c000 rw-p 00002000 09:03 149348830                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/cpanel_lib/i386-linux-64int/auto/BSD/Resource/Resource.so
    0051c000-0051f000 r-xp 00000000 09:03 149209489                          /lib/libcom_err.so.2.1
    0051f000-00520000 r--p 00002000 09:03 149209489                          /lib/libcom_err.so.2.1
    00520000-00521000 rw-p 00003000 09:03 149209489                          /lib/libcom_err.so.2.1
    0052a000-00530000 r-xp 00000000 09:03 149325222                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/cpanel_lib/i386-linux-64int/auto/Encode/Encode.so
    00530000-00531000 rw-p 00005000 09:03 149325222                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/cpanel_lib/i386-linux-64int/auto/Encode/Encode.so
    00531000-00546000 r-xp 00000000 09:03 149209843                          /lib/libresolv-2.12.so
    00546000-00547000 ---p 00015000 09:03 149209843                          /lib/libresolv-2.12.so
    00547000-00548000 r--p 00015000 09:03 149209843                          /lib/libresolv-2.12.so
    00548000-00549000 rw-p 00016000 09:03 149209843                          /lib/libresolv-2.12.so
    00549000-0054b000 rw-p 00000000 00:00 0 
    0054b000-00555000 r-xp 00000000 09:03 149209470                          /lib/libkrb5support.so.0.1
    00555000-00556000 r--p 00009000 09:03 149209470                          /lib/libkrb5support.so.0.1
    00556000-00557000 rw-p 0000a000 09:03 149209470                          /lib/libkrb5support.so.0.1
    00557000-0056e000 r-xp 00000000 09:03 149209488                          /lib/libpthread-2.12.so
    0056e000-0056f000 r--p 00016000 09:03 149209488                          /lib/libpthread-2.12.so
    0056f000-00570000 rw-p 00017000 09:03 149209488                          /lib/libpthread-2.12.so
    00570000-00572000 rw-p 00000000 00:00 0 
    00572000-0059b000 r-xp 00000000 09:03 153470215                          /var/lib/spamassassin/compiled/5.014/3.003002/auto/Mail/SpamAssassin/CompiledRegexps/body_0/body_0.so
    0059b000-0059c000 rw-p 00029000 09:03 153470215                          /var/lib/spamassassin/compiled/5.014/3.003002/auto/Mail/SpamAssassin/CompiledRegexps/body_0/body_0.so
    0059c000-005da000 r-xp 00000000 09:03 149209462                          /lib/libgssapi_krb5.so.2.2
    005da000-005db000 r--p 0003e000 09:03 149209462                          /lib/libgssapi_krb5.so.2.2
    005db000-005dc000 rw-p 0003f000 09:03 149209462                          /lib/libgssapi_krb5.so.2.2
    005f2000-005f5000 r-xp 00000000 09:03 149209558                          /lib/libdl-2.12.so
    005f5000-005f6000 r--p 00002000 09:03 149209558                          /lib/libdl-2.12.so
    005f6000-005f7000 rw-p 00003000 09:03 149209558                          /lib/libdl-2.12.so
    005f7000-0061f000 r-xp 00000000 09:03 149209466                          /lib/libk5crypto.so.3.1
    0061f000-00620000 r--p 00028000 09:03 149209466                          /lib/libk5crypto.so.3.1
    00620000-00621000 rw-p 00029000 09:03 149209466                          /lib/libk5crypto.so.3.1
    00621000-00622000 rw-p 00000000 00:00 0 
    00624000-00636000 r-xp 00000000 09:03 149209835                          /lib/libz.so.1.2.3
    00636000-00637000 r--p 00011000 09:03 149209835                          /lib/libz.so.1.2.3
    00637000-00638000 rw-p 00012000 09:03 149209835                          /lib/libz.so.1.2.3
    00638000-0068c000 r-xp 00000000 09:03 149069865                          /usr/lib/libssl.so.1.0.0
    0068c000-0068e000 r--p 00054000 09:03 149069865                          /usr/lib/libssl.so.1.0.0
    0068e000-00691000 rw-p 00056000 09:03 149069865                          /usr/lib/libssl.so.1.0.0
    006ab000-006af000 r-xp 00000000 09:03 149325138                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/cpanel_lib/i386-linux-64int/auto/Time/HiRes/HiRes.so
    006af000-006b0000 rw-p 00003000 09:03 149325138                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/cpanel_lib/i386-linux-64int/auto/Time/HiRes/HiRes.so
    006b0000-006cd000 r-xp 00000000 09:03 149209396                          /lib/libselinux.so.1
    006cd000-006ce000 r--p 0001c000 09:03 149209396                          /lib/libselinux.so.1
    006ce000-006cf000 rw-p 0001d000 09:03 149209396                          /lib/libselinux.so.1
    0072d000-00772000 r-xp 00000000 09:03 149244718                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/5.14.3/i386-linux-64int/auto/re/re.so
    00772000-00773000 rw-p 00045000 09:03 149244718                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/5.14.3/i386-linux-64int/auto/re/re.so
    0081d000-00821000 r-xp 00000000 09:03 149348911                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/cpanel_lib/i386-linux-64int/auto/NetAddr/IP/Util/Util.so
    00821000-00822000 rw-p 00003000 09:03 149348911                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/cpanel_lib/i386-linux-64int/auto/NetAddr/IP/Util/Util.so
    00852000-00869000 r-xp 00000000 09:03 149209579                          /lib/libnsl-2.12.so
    00869000-0086a000 r--p 00016000 09:03 149209579                          /lib/libnsl-2.12.so
    0086a000-0086b000 rw-p 00017000 09:03 149209579                          /lib/libnsl-2.12.so
    0086b000-0086d000 rw-p 00000000 00:00 0 
    0086d000-00943000 r-xp 00000000 09:03 149209468                          /lib/libkrb5.so.3.3
    00943000-00949000 r--p 000d5000 09:03 149209468                          /lib/libkrb5.so.3.3
    00949000-0094a000 rw-p 000db000 09:03 149209468                          /lib/libkrb5.so.3.3
    009a7000-009ab000 r-xp 00000000 09:03 149505507                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/cpanel_lib/i386-linux-64int/auto/Net/LibIDN/LibIDN.so
    009ab000-009ac000 rw-p 00003000 09:03 149505507                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/cpanel_lib/i386-linux-64int/auto/Net/LibIDN/LibIDN.so
    009c5000-009cb000 r-xp 00000000 09:03 149070251                          /usr/lib/libgdbm.so.2.0.0
    009cb000-009cc000 rw-p 00005000 09:03 149070251                          /usr/lib/libgdbm.so.2.0.0
    009ee000-009f3000 r-xp 00000000 09:03 151029026                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/cpanel_lib/i386-linux-64int/auto/Crypt/OpenSSL/Bignum/Bignum.so
    009f3000-009f4000 rw-p 00004000 09:03 151029026                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/cpanel_lib/i386-linux-64int/auto/Crypt/OpenSSL/Bignum/Bignum.so
    00a27000-00a2e000 r-xp 00000000 09:03 149209557                          /lib/libcrypt-2.12.so
    00a2e000-00a2f000 r--p 00007000 09:03 149209557                          /lib/libcrypt-2.12.so
    00a2f000-00a30000 rw-p 00008000 09:03 149209557                          /lib/libcrypt-2.12.so
    00a30000-00a57000 rw-p 00000000 00:00 0 
    00a87000-00a89000 r-xp 00000000 09:03 149209523                          /lib/libkeyutils.so.1.3
    00a89000-00a8a000 r--p 00001000 09:03 149209523                          /lib/libkeyutils.so.1.3
    00a8a000-00a8b000 rw-p 00002000 09:03 149209523                          /lib/libkeyutils.so.1.3
    00a93000-00a98000 r-xp 00000000 09:03 149244706                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/5.14.3/i386-linux-64int/auto/Socket/Socket.so
    00a98000-00a99000 rw-p 00005000 09:03 149244706                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/5.14.3/i386-linux-64int/auto/Socket/Socket.so
    00b7e000-00b9c000 r-xp 00000000 09:03 149209533                          /lib/ld-2.12.so
    00b9c000-00b9d000 r--p 0001d000 09:03 149209533                          /lib/ld-2.12.so
    00b9d000-00b9e000 rw-p 0001e000 09:03 149209533                          /lib/ld-2.12.so
    00c3a000-00c3d000 r-xp 00000000 09:03 149325075                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/cpanel_lib/i386-linux-64int/auto/IO/IO.so
    00c3d000-00c3e000 rw-p 00002000 09:03 149325075                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/cpanel_lib/i386-linux-64int/auto/IO/IO.so
    00d74000-00d75000 r-xp 00000000 00:00 0                                  [vdso]
    00db4000-00db6000 r-xp 00000000 09:03 149244516                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/5.14.3/i386-linux-64int/auto/Fcntl/Fcntl.so
    00db6000-00db7000 rw-p 00002000 09:03 149244516                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/5.14.3/i386-linux-64int/auto/Fcntl/Fcntl.so
    00dd5000-00dda000 r-xp 00000000 09:03 153158026                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/cpanel_lib/i386-linux-64int/auto/Crypt/OpenSSL/RSA/RSA.so
    00dda000-00ddb000 rw-p 00004000 09:03 153158026                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/cpanel_lib/i386-linux-64int/auto/Crypt/OpenSSL/RSA/RSA.so
    00e39000-00e4a000 r-xp 00000000 09:03 149244530                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/5.14.3/i386-linux-64int/auto/POSIX/POSIX.so
    00e4a000-00e4c000 rw-p 00010000 09:03 149244530                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/5.14.3/i386-linux-64int/auto/POSIX/POSIX.so
    00e65000-00e68000 r-xp 00000000 09:03 149244517                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/5.14.3/i386-linux-64int/auto/File/Glob/Glob.so
    00e68000-00e69000 rw-p 00002000 09:03 149244517                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/5.14.3/i386-linux-64int/auto/File/Glob/Glob.so
    00e78000-00e7a000 r-xp 00000000 09:03 149209838                          /lib/libutil-2.12.so
    00e7a000-00e7b000 r--p 00001000 09:03 149209838                          /lib/libutil-2.12.so
    00e7b000-00e7c000 rw-p 00002000 09:03 149209838                          /lib/libutil-2.12.so
    00e86000-00f8c000 r-xp 00000000 09:03 149244352                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/5.14.3/i386-linux-64int/CORE/libperl.so
    00f8c000-00f91000 rw-p 00106000 09:03 149244352                          /usr/local/cpanel/3rdparty/perl/514/lib/perl5/5.14.3/i386-linux-64int/CORE/libperl.so
    00f91000-01106000 r-xp 00000000 09:03 149069863                          /usr/lib/libcrypto.so.1.0.0
    01106000-01107000 ---p 00175000 09:03 149069863                          /usr/lib/libcrypto.so.1.0.0
    01107000-01115000 r--p 00175000 09:03 149069863                          /usr/lib/libcrypto.so.1.0.0
    01115000-0111b000 rw-p 00183000 09:03 149069863                          /usr/lib/libcrypto.so.1.0.0
    0111b000-0111e000 rw-p 00000000 00:00 0 
    08048000-08049000 r-xp 00000000 09:03 149244974                          /usr/local/cpanel/3rdparty/perl/514/bin/perl
    08049000-0804a000 rw-p 00000000 09:03 149244974                          /usr/local/cpanel/3rdparty/perl/514/bin/perl
    082a0000-08c79000 rw-p 00000000 00:00 0 
    08c79000-09d45000 rw-p 00000000 00:00 0 
    09d45000-09e8f000 rw-p 00000000 00:00 0 
    b7716000-b7753000 rw-p 00000000 00:00 0 
    b7753000-b7756000 rw-p 00000000 00:00 0 
    b775e000-b775f000 rw-p 00000000 00:00 0 
    bfd39000-bfd79000 rw-p 00000000 00:00 0                                  [stack]
     
  2. NixTree

    NixTree Well-Known Member

    Joined:
    Aug 19, 2010
    Messages:
    387
    Likes Received:
    1
    Trophy Points:
    18
    Location:
    Gods Own Country
    cPanel Access Level:
    Root Administrator
    put "exe:/usr/local/cpanel/3rdparty/perl/514/bin/perl" without quotes to your /etc/csf/csf.pignore and reload / restart CSF / LFD
     
  3. novaworld1

    novaworld1 Registered

    Joined:
    Mar 26, 2013
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    that's great so sorry not got back to you sooner on this thankyou again
     
Loading...

Share This Page