Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

What is this? ./anything

Discussion in 'General Discussion' started by persianwhois, Aug 20, 2009.

  1. persianwhois

    persianwhois Well-Known Member

    Joined:
    Apr 18, 2007
    Messages:
    117
    Likes Received:
    0
    Trophy Points:
    166
    Location:
    Mahallat
    cPanel Access Level:
    Root Administrator
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  2. stan01

    stan01 Member

    Joined:
    Jul 9, 2009
    Messages:
    5
    Likes Received:
    0
    Trophy Points:
    51
    I'm guessing, that the wwwpars account got hacked. Considering the fact, that so many processes were spawned, I'd say it is a mailer of some sort. You can check the file's content by doing:

    vi /home/wwwpars/public_html/anything

    or wherever the file is located. To make sure it doesn't start anymore, you can chmod it to 0 and chown it to root.
     
  3. ddmd

    ddmd Registered

    Joined:
    Jul 11, 2009
    Messages:
    3
    Likes Received:
    0
    Trophy Points:
    51

    That really looks strange. The process was executed locally instead of giving the full path and with so many forks.

    Try doing lsof -p 10526 (or whatever process it has now) to see what it is doing...
     
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice