Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

what is htttpd32?

Discussion in 'General Discussion' started by unomateo, May 8, 2007.

  1. unomateo

    unomateo Active Member

    Joined:
    Jan 14, 2006
    Messages:
    27
    Likes Received:
    0
    Trophy Points:
    151
    when I check "Show Current CPU Usage" with WHM, I see this at 99.9% CPU
    [htttpd32] Yes, those are 3 t's

    I've googled it, but found nothing
     
  2. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,460
    Likes Received:
    21
    Trophy Points:
    463
    Location:
    Go on, have a guess
    It's most likely an exploit attempting to hide its process name. Try looking at the files the process has open with:

    lsof -p PID

    Where PID is the process id of that process.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. katmai

    katmai Well-Known Member

    Joined:
    Mar 13, 2006
    Messages:
    532
    Likes Received:
    0
    Trophy Points:
    166
    Location:
    Brno, Czech Republic
    prolly bind shell.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  4. unomateo

    unomateo Active Member

    Joined:
    Jan 14, 2006
    Messages:
    27
    Likes Received:
    0
    Trophy Points:
    151
    now scanBR has 2 processes I can't kill

    in WHM it shows up as scanBR

    when I'm in SSH, and run top, it appears as perl
     

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice