Hi,My server was hacked last week.and fixed my server's security flaws.but I don't understand this *Special FTP Accounts* .This part is important ? .can I remove this ftp accounts?
The system creates these accounts by default. Unlike other FTP accounts, you cannot modify or delete these accounts. This is because the system links these accounts to administrative aspects of your cPanel account.
"efayapi" is basically your cPanel account so you can't remove that and "efayapi_logs" is being used to gather metrics for the account so even if your server got hacked I'm pretty sure it was not due to these "special accounts" but something else.