The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

what is htttpd32?

Discussion in 'General Discussion' started by unomateo, May 8, 2007.

  1. unomateo

    unomateo Active Member

    Joined:
    Jan 14, 2006
    Messages:
    27
    Likes Received:
    0
    Trophy Points:
    1
    when I check "Show Current CPU Usage" with WHM, I see this at 99.9% CPU
    [htttpd32] Yes, those are 3 t's

    I've googled it, but found nothing
     
  2. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,475
    Likes Received:
    20
    Trophy Points:
    38
    Location:
    Go on, have a guess
    It's most likely an exploit attempting to hide its process name. Try looking at the files the process has open with:

    lsof -p PID

    Where PID is the process id of that process.
     
  3. katmai

    katmai Well-Known Member

    Joined:
    Mar 13, 2006
    Messages:
    526
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Brno, Czech Republic
    prolly bind shell.
     
  4. unomateo

    unomateo Active Member

    Joined:
    Jan 14, 2006
    Messages:
    27
    Likes Received:
    0
    Trophy Points:
    1
    now scanBR has 2 processes I can't kill

    in WHM it shows up as scanBR

    when I'm in SSH, and run top, it appears as perl
     

Share This Page