The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

What is this? ./anything

Discussion in 'General Discussion' started by persianwhois, Aug 20, 2009.

  1. persianwhois

    persianwhois Well-Known Member

    Joined:
    Apr 18, 2007
    Messages:
    117
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Mahallat
    cPanel Access Level:
    Root Administrator
  2. stan01

    stan01 Member

    Joined:
    Jul 9, 2009
    Messages:
    5
    Likes Received:
    0
    Trophy Points:
    1
    I'm guessing, that the wwwpars account got hacked. Considering the fact, that so many processes were spawned, I'd say it is a mailer of some sort. You can check the file's content by doing:

    vi /home/wwwpars/public_html/anything

    or wherever the file is located. To make sure it doesn't start anymore, you can chmod it to 0 and chown it to root.
     
  3. ddmd

    ddmd Registered

    Joined:
    Jul 11, 2009
    Messages:
    3
    Likes Received:
    0
    Trophy Points:
    1

    That really looks strange. The process was executed locally instead of giving the full path and with so many forks.

    Try doing lsof -p 10526 (or whatever process it has now) to see what it is doing...
     
Loading...

Share This Page