Trojan Horses Detected by (WHM)

D

DreamPhysix

Well-Known Member
Sep 30, 2009
78
0
56
I received an email from my cpanel server titled Trojan Horses Detected by (WHM) containing the following:
Hidden Pid detected! [pid 1876]
hidden from ps: [yes]
hidden from kernel: [yes]
binary location: [/sbin/rsyslogd]

Hidden Pid detected! [pid 1877]
hidden from ps: [yes]
hidden from kernel: [yes]
binary location: [/sbin/rsyslogd]

Hidden Pid detected! [pid 1897]
hidden from ps: [yes]
hidden from kernel: [yes]
binary location: [/usr/sbin/named]

Hidden Pid detected! [pid 1898]
hidden from ps: [yes]
hidden from kernel: [yes]
binary location: [/usr/sbin/named]

Hidden Pid detected! [pid 1899]
hidden from ps: [yes]
hidden from kernel: [yes]
binary location: [/usr/sbin/named]

Hidden Pid detected! [pid 1900]
hidden from ps: [yes]
hidden from kernel: [yes]
binary location: [/usr/sbin/named]

Hidden Pid detected! [pid 1901]
hidden from ps: [yes]
hidden from kernel: [yes]
binary location: [/usr/sbin/named]

Hidden Pid detected! [pid 1902]
hidden from ps: [yes]
hidden from kernel: [yes]
binary location: [/usr/sbin/named]

Hidden Pid detected! [pid 2002]
hidden from ps: [yes]
hidden from kernel: [yes]
binary location: [/usr/sbin/mysqld]

Hidden Pid detected! [pid 2003]
hidden from ps: [yes]
hidden from kernel: [yes]
binary location: [/usr/sbin/mysqld]

Hidden Pid detected! [pid 2004]
hidden from ps: [yes]
hidden from kernel: [yes]
binary location: [/usr/sbin/mysqld]

Hidden Pid detected! [pid 2005]
hidden from ps: [yes]
hidden from kernel: [yes]
binary location: [/usr/sbin/mysqld]

Hidden Pid detected! [pid 2007]
hidden from ps: [yes]
hidden from kernel: [yes]
binary location: [/usr/sbin/mysqld]

Hidden Pid detected! [pid 2008]
hidden from ps: [yes]
hidden from kernel: [yes]
binary location: [/usr/sbin/mysqld]

Hidden Pid detected! [pid 2009]
hidden from ps: [yes]
hidden from kernel: [yes]
binary location: [/usr/sbin/mysqld]

Hidden Pid detected! [pid 2010]
hidden from ps: [yes]
hidden from kernel: [yes]
binary location: [/usr/sbin/mysqld]

Hidden Pid detected! [pid 2011]
hidden from ps: [yes]
hidden from kernel: [yes]
binary location: [/usr/sbin/mysqld]

Hidden Pid detected! [pid 28432]
hidden from ps: [yes]
hidden from kernel: [yes]
binary location: [/usr/sbin/clamd]

Hidden Pid detected! [pid 29598]
hidden from ps: [yes]
hidden from kernel: [yes]
binary location: [/usr/sbin/mysqld]

Hidden Pid detected! [pid 30401]
hidden from ps: [yes]
hidden from kernel: [yes]
binary location: [/usr/sbin/mysqld]

Hidden Pid detected! [pid 30408]
hidden from ps: [yes]
hidden from kernel: [yes]
binary location: [/usr/sbin/mysqld]

Hidden Pid detected! [pid 30430]
hidden from ps: [yes]
hidden from kernel: [yes]
binary location: [/sbin/rsyslogd]
Click to expand...
This installation of cpanel is new so these are false positives. how do i fix this?
 
Q

quietFinn

Well-Known Member
Feb 4, 2006
1,902
466
438
Finland
cPanel Access Level
Root Administrator
You must log in or register to reply here.
Thread starter Similar threads Forum Replies Date
P Disabling "Trojan Horses Detected" daily e-mail Security 6
D Trojan Horses Detected by (WHM) after fresh install of cPanel [case 55852] Security 8
M Trojan Horses detected on a clean install Security 4
B "Trojan Horses Detected" but only rsyslogd and mysqld. New server, scans shows clean Security 2
M 'Trojan Horses Detected by WHM' - Real or Not Security 3
Similar threads
Disabling "Trojan Horses Detected" daily e-mail
Trojan Horses Detected by (WHM) after fresh install of cPanel [case 55852]
Trojan Horses detected on a clean install
"Trojan Horses Detected" but only rsyslogd and mysqld. New server, scans shows clean
'Trojan Horses Detected by WHM' - Real or Not
Top Bottom