What would install Virtuozzo Guest Tools?

Operating System & Version
CentOS 7.8
cPanel & WHM Version
11.88

Michael-Inet

Well-Known Member
Feb 20, 2014
117
15
68
Nashville, TN, USA
cPanel Access Level
Root Administrator
Concerned about a possible server breach.

LFD is saying:

Code:
lfd: System Integrity checking detected a modified system file

The following list of files have FAILED the md5sum comparison test. This means
that the file has been changed in some way. This could be a result of an OS update
or application upgrade. If the change is unexpected it should be investigated:

/usr/bin/install-tools: FAILED
/bin/install-tools: FAILED
I checked the cPanel logs and didn’t find a match. Doing a head got me this:

Code:
[email protected] [/usr/local/cpanel/logs]# head /usr/bin/install-tools
#!/bin/bash
#
# Copyright (c) 2017-2019 Virtuozzo International GmbH, All rights reserved.
Google searching says that’s Virtuozzo Guest Tools, but I have a process I’m not familiar with running under the account:

Code:
UID        PID  PPID  C    SZ   RSS PSR STIME TTY      STAT   TIME CMD
xxxx     6838   931  0 15381  5972   5 22:05 ?        S      0:00 dovecot/lmtp
And the lfd Suspicious process email at bottom. (I’m always SSHed in to most of my servers, so I’m use to these and didn’t read it at first)

The server was built 3 days ago, yum updated immediately after install, cPanel installed just after that, and then csf.

Edit: Hosting firm's response: "We didn't install any Virtuozzo guest-related tools on your VM."

Anyone have knowledge?

Thanks,
Michael

Code:
lfd: Suspicious process running under user

Time:    Sun Jun 21 13:59:00 2020 -0500
PID:     9661 (Parent PID:736)
Uptime:  22682 seconds


Executable:

/usr/local/cpanel/3rdparty/perl/530/bin/perl


Command Line (often faked in exploits):

spamd child


Network connections by the process (if any):

tcp: 127.0.0.1:783 -> 127.0.0.1:56128
udp: 199.241.139.154:11713 -> 8.8.8.8:53
tcp: 199.241.139.154:43400 -> 208.83.137.118:2703


Files open by the process (if any):

/dev/null
/dev/null
/dev/null
/usr/local/cpanel/3rdparty/perl/530/bin/spamd
/var/cpanel/locale/en.cdb
/usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/Net/DNS/Resolver/Base.pm
/dev/null


Memory maps by the process (if any):

00400000-00402000 r-xp 00000000 08:01 171966652                          /usr/local/cpanel/3rdparty/perl/530/bin/perl
00601000-00602000 r--p 00001000 08:01 171966652                          /usr/local/cpanel/3rdparty/perl/530/bin/perl
00602000-00603000 rw-p 00002000 08:01 171966652                          /usr/local/cpanel/3rdparty/perl/530/bin/perl
00c33000-02482000 rw-p 00000000 00:00 0                                  [heap]
02482000-07dc0000 rw-p 00000000 00:00 0                                  [heap]
07dc0000-08735000 rw-p 00000000 00:00 0                                  [heap]
2b1867936000-2b1867958000 r-xp 00000000 08:01 430                        /usr/lib64/ld-2.17.so
2b1867958000-2b1867959000 rw-p 00000000 00:00 0
2b1867963000-2b1867969000 rw-p 00000000 00:00 0
2b1867969000-2b186799e000 r--s 00000000 08:01 62914742                   /var/db/nscd/hosts
2b18679bf000-2b18679f4000 r--s 00000000 08:01 62914740                   /var/db/nscd/passwd
2b18679f4000-2b1867a75000 rw-p 00000000 00:00 0
2b1867b57000-2b1867b58000 r--p 00021000 08:01 430                        /usr/lib64/ld-2.17.so
2b1867b58000-2b1867b59000 rw-p 00022000 08:01 430                        /usr/lib64/ld-2.17.so
2b1867b59000-2b1867b5a000 rw-p 00000000 00:00 0
2b1867b5a000-2b1867e2b000 r-xp 00000000 08:01 58722695                   /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/CORE/libperl.so
2b1867e2b000-2b186802b000 ---p 002d1000 08:01 58722695                   /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/CORE/libperl.so
2b186802b000-2b186803a000 r--p 002d1000 08:01 58722695                   /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/CORE/libperl.so
2b186803a000-2b186803e000 rw-p 002e0000 08:01 58722695                   /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/CORE/libperl.so
2b186803e000-2b1868045000 rw-p 00000000 00:00 0
2b1868045000-2b186805c000 r-xp 00000000 08:01 4725                       /usr/lib64/libpthread-2.17.so
2b186805c000-2b186825b000 ---p 00017000 08:01 4725                       /usr/lib64/libpthread-2.17.so
2b186825b000-2b186825c000 r--p 00016000 08:01 4725                       /usr/lib64/libpthread-2.17.so
2b186825c000-2b186825d000 rw-p 00017000 08:01 4725                       /usr/lib64/libpthread-2.17.so
2b186825d000-2b1868261000 rw-p 00000000 00:00 0
2b1868261000-2b1868278000 r-xp 00000000 08:01 452                        /usr/lib64/libnsl-2.17.so
2b1868278000-2b1868477000 ---p 00017000 08:01 452                        /usr/lib64/libnsl-2.17.so
2b1868477000-2b1868478000 r--p 00016000 08:01 452                        /usr/lib64/libnsl-2.17.so
2b1868478000-2b1868479000 rw-p 00017000 08:01 452                        /usr/lib64/libnsl-2.17.so
2b1868479000-2b186847b000 rw-p 00000000 00:00 0
2b186847b000-2b186847d000 r-xp 00000000 08:01 447                        /usr/lib64/libdl-2.17.so
2b186847d000-2b186867d000 ---p 00002000 08:01 447                        /usr/lib64/libdl-2.17.so
2b186867d000-2b186867e000 r--p 00002000 08:01 447                        /usr/lib64/libdl-2.17.so
2b186867e000-2b186867f000 rw-p 00003000 08:01 447                        /usr/lib64/libdl-2.17.so
2b186867f000-2b1868780000 r-xp 00000000 08:01 449                        /usr/lib64/libm-2.17.so
2b1868780000-2b186897f000 ---p 00101000 08:01 449                        /usr/lib64/libm-2.17.so
2b186897f000-2b1868980000 r--p 00100000 08:01 449                        /usr/lib64/libm-2.17.so
2b1868980000-2b1868981000 rw-p 00101000 08:01 449                        /usr/lib64/libm-2.17.so
2b1868981000-2b1868989000 r-xp 00000000 08:01 445                        /usr/lib64/libcrypt-2.17.so
2b1868989000-2b1868b88000 ---p 00008000 08:01 445                        /usr/lib64/libcrypt-2.17.so
2b1868b88000-2b1868b89000 r--p 00007000 08:01 445                        /usr/lib64/libcrypt-2.17.so
2b1868b89000-2b1868b8a000 rw-p 00008000 08:01 445                        /usr/lib64/libcrypt-2.17.so
2b1868b8a000-2b1868bb8000 rw-p 00000000 00:00 0
2b1868bb8000-2b1868bba000 r-xp 00000000 08:01 4733                       /usr/lib64/libutil-2.17.so
2b1868bba000-2b1868db9000 ---p 00002000 08:01 4733                       /usr/lib64/libutil-2.17.so
2b1868db9000-2b1868dba000 r--p 00001000 08:01 4733                       /usr/lib64/libutil-2.17.so
2b1868dba000-2b1868dbb000 rw-p 00002000 08:01 4733                       /usr/lib64/libutil-2.17.so
2b1868dbb000-2b1868f7e000 r-xp 00000000 08:01 441                        /usr/lib64/libc-2.17.so
2b1868f7e000-2b186917e000 ---p 001c3000 08:01 441                        /usr/lib64/libc-2.17.so
2b186917e000-2b1869182000 r--p 001c3000 08:01 441                        /usr/lib64/libc-2.17.so
2b1869182000-2b1869184000 rw-p 001c7000 08:01 441                        /usr/lib64/libc-2.17.so
2b1869184000-2b1869189000 rw-p 00000000 00:00 0
2b1869189000-2b186918b000 r-xp 00000000 08:01 254                        /usr/lib64/libfreebl3.so
2b186918b000-2b186938a000 ---p 00002000 08:01 254                        /usr/lib64/libfreebl3.so
2b186938a000-2b186938b000 r--p 00001000 08:01 254                        /usr/lib64/libfreebl3.so
2b186938b000-2b186938c000 rw-p 00002000 08:01 254                        /usr/lib64/libfreebl3.so
2b186938c000-2b18693fc000 r-xp 00000000 08:01 515900325                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/re/re.so
2b18693fc000-2b18695fb000 ---p 00070000 08:01 515900325                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/re/re.so
2b18695fb000-2b18695fc000 r--p 0006f000 08:01 515900325                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/re/re.so
2b18695fc000-2b18695fd000 rw-p 00070000 08:01 515900325                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/re/re.so
2b18695fd000-2b1869601000 r-xp 00000000 08:01 369098916                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/IO/IO.so
2b1869601000-2b1869800000 ---p 00004000 08:01 369098916                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/IO/IO.so
2b1869800000-2b1869801000 r--p 00003000 08:01 369098916                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/IO/IO.so
2b1869801000-2b1869802000 rw-p 00004000 08:01 369098916                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/IO/IO.so
2b1869802000-2b186980a000 r-xp 00000000 08:01 448825224                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/Socket/Socket.so
2b186980a000-2b1869a0a000 ---p 00008000 08:01 448825224                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/Socket/Socket.so
2b1869a0a000-2b1869a0c000 r--p 00008000 08:01 448825224                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/Socket/Socket.so
2b1869a0c000-2b1869a0d000 rw-p 0000a000 08:01 448825224                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/Socket/Socket.so
2b1869a0d000-2b1869a11000 r-xp 00000000 08:01 88081742                   /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/Socket6/Socket6.so
2b1869a11000-2b1869c10000 ---p 00004000 08:01 88081742                   /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/Socket6/Socket6.so
2b1869c10000-2b1869c11000 r--p 00003000 08:01 88081742                   /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/Socket6/Socket6.so
2b1869c11000-2b1869c12000 rw-p 00004000 08:01 88081742                   /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/Socket6/Socket6.so
2b1869c12000-2b1869c1e000 r-xp 00000000 08:01 462                        /usr/lib64/libnss_files-2.17.so
2b1869c1e000-2b1869e1d000 ---p 0000c000 08:01 462                        /usr/lib64/libnss_files-2.17.so
2b1869e1d000-2b1869e1e000 r--p 0000b000 08:01 462                        /usr/lib64/libnss_files-2.17.so
2b1869e1e000-2b1869e1f000 rw-p 0000c000 08:01 462                        /usr/lib64/libnss_files-2.17.so
2b1869e1f000-2b1869e25000 rw-p 00000000 00:00 0
2b1869e25000-2b1869e28000 r-xp 00000000 08:01 314638893                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/Fcntl/Fcntl.so
2b1869e28000-2b186a028000 ---p 00003000 08:01 314638893                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/Fcntl/Fcntl.so
2b186a028000-2b186a029000 r--p 00003000 08:01 314638893                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/Fcntl/Fcntl.so
2b186a029000-2b186a02a000 rw-p 00004000 08:01 314638893                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/Fcntl/Fcntl.so
2b186a02a000-2b186a030000 r-xp 00000000 08:01 486539364                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/Time/HiRes/HiRes.so
2b186a030000-2b186a22f000 ---p 00006000 08:01 486539364                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/Time/HiRes/HiRes.so
2b186a22f000-2b186a230000 r--p 00005000 08:01 486539364                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/Time/HiRes/HiRes.so
2b186a230000-2b186a231000 rw-p 00006000 08:01 486539364                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/Time/HiRes/HiRes.so
2b186a231000-2b186a238000 r-xp 00000000 08:01 4729                       /usr/lib64/librt-2.17.so
2b186a238000-2b186a437000 ---p 00007000 08:01 4729                       /usr/lib64/librt-2.17.so
2b186a437000-2b186a438000 r--p 00006000 08:01 4729                       /usr/lib64/librt-2.17.so
2b186a438000-2b186a439000 rw-p 00007000 08:01 4729                       /usr/lib64/librt-2.17.so
2b186a439000-2b186a44e000 r-xp 00000000 08:01 419432391                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/POSIX/POSIX.so
2b186a44e000-2b186a64d000 ---p 00015000 08:01 419432391                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/POSIX/POSIX.so
2b186a64d000-2b186a650000 r--p 00014000 08:01 419432391                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/POSIX/POSIX.so
2b186a650000-2b186a651000 rw-p 00017000 08:01 419432391                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/POSIX/POSIX.so
2b186a651000-2b186a655000 r-xp 00000000 08:01 406849724                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/NetAddr/IP/Util/Util.so
2b186a655000-2b186a855000 ---p 00004000 08:01 406849724                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/NetAddr/IP/Util/Util.so
2b186a855000-2b186a856000 r--p 00004000 08:01 406849724                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/NetAddr/IP/Util/Util.so
2b186a856000-2b186a857000 rw-p 00005000 08:01 406849724                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/NetAddr/IP/Util/Util.so
2b186a857000-2b186a85a000 r-xp 00000000 08:01 20974340                   /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/Cwd/Cwd.so
2b186a85a000-2b186aa59000 ---p 00003000 08:01 20974340                   /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/Cwd/Cwd.so
2b186aa59000-2b186aa5a000 r--p 00002000 08:01 20974340                   /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/Cwd/Cwd.so
2b186aa5a000-2b186aa5b000 rw-p 00003000 08:01 20974340                   /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/Cwd/Cwd.so
2b186aa5b000-2b186aa5c000 r-xp 00000000 08:01 461374098                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/Sys/Hostname/Hostname.so
2b186aa5c000-2b186ac5b000 ---p 00001000 08:01 461374098                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/Sys/Hostname/Hostname.so
2b186ac5b000-2b186ac5c000 r--p 00000000 08:01 461374098                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/Sys/Hostname/Hostname.so
2b186ac5c000-2b186ac5d000 rw-p 00001000 08:01 461374098                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/Sys/Hostname/Hostname.so
2b186ac5d000-2b186ac60000 r-xp 00000000 08:01 394264766                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/MIME/Base64/Base64.so
2b186ac60000-2b186ae5f000 ---p 00003000 08:01 394264766                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/MIME/Base64/Base64.so
2b186ae5f000-2b186ae60000 r--p 00002000 08:01 394264766                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/MIME/Base64/Base64.so
2b186ae60000-2b186ae61000 rw-p 00003000 08:01 394264766                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/MIME/Base64/Base64.so
2b186ae61000-2b186ae66000 r-xp 00000000 08:01 327155895                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/File/Glob/Glob.so
2b186ae66000-2b186b065000 ---p 00005000 08:01 327155895                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/File/Glob/Glob.so
2b186b065000-2b186b066000 r--p 00004000 08:01 327155895                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/File/Glob/Glob.so
2b186b066000-2b186b067000 rw-p 00005000 08:01 327155895                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/File/Glob/Glob.so
2b186b067000-2b186b070000 r-xp 00000000 08:01 272629933                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/Digest/SHA/SHA.so
2b186b070000-2b186b26f000 ---p 00009000 08:01 272629933                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/Digest/SHA/SHA.so
2b186b26f000-2b186b270000 r--p 00008000 08:01 272629933                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/Digest/SHA/SHA.so
2b186b270000-2b186b271000 rw-p 00009000 08:01 272629933                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/Digest/SHA/SHA.so
2b186b271000-2b186b27a000 r-xp 00000000 08:01 671093134                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/HTML/Parser/Parser.so
2b186b27a000-2b186b47a000 ---p 00009000 08:01 671093134                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/HTML/Parser/Parser.so
2b186b47a000-2b186b47b000 r--p 00009000 08:01 671093134                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/HTML/Parser/Parser.so
2b186b47b000-2b186b47c000 rw-p 0000a000 08:01 671093134                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/HTML/Parser/Parser.so
2b186b47c000-2b186b485000 r-xp 00000000 08:01 58722802                   /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/Encode/Encode.so
2b186b485000-2b186b684000 ---p 00009000 08:01 58722802                   /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/Encode/Encode.so
2b186b684000-2b186b685000 r--p 00008000 08:01 58722802                   /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/Encode/Encode.so
2b186b685000-2b186b686000 rw-p 00009000 08:01 58722802                   /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/Encode/Encode.so
2b186b686000-2b186b69f000 r-xp 00000000 08:01 645925998                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/Encode/Detect/Detector/Detector.so
2b186b69f000-2b186b89f000 ---p 00019000 08:01 645925998                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/Encode/Detect/Detector/Detector.so
2b186b89f000-2b186b8a0000 r--p 00019000 08:01 645925998                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/Encode/Detect/Detector/Detector.so
2b186b8a0000-2b186b8aa000 rw-p 0001a000 08:01 645925998                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/Encode/Detect/Detector/Detector.so
2b186b8aa000-2b186b993000 r-xp 00000000 08:01 5663                       /usr/lib64/libstdc++.so.6.0.19
2b186b993000-2b186bb92000 ---p 000e9000 08:01 5663                       /usr/lib64/libstdc++.so.6.0.19
2b186bb92000-2b186bb9a000 r--p 000e8000 08:01 5663                       /usr/lib64/libstdc++.so.6.0.19
2b186bb9a000-2b186bb9c000 rw-p 000f0000 08:01 5663                       /usr/lib64/libstdc++.so.6.0.19
2b186bb9c000-2b186bbb1000 rw-p 00000000 00:00 0
2b186bbb1000-2b186bbc6000 r-xp 00000000 08:01 207                        /usr/lib64/libgcc_s-4.8.5-20150702.so.1
2b186bbc6000-2b186bdc5000 ---p 00015000 08:01 207                        /usr/lib64/libgcc_s-4.8.5-20150702.so.1
2b186bdc5000-2b186bdc6000 r--p 00014000 08:01 207                        /usr/lib64/libgcc_s-4.8.5-20150702.so.1
2b186bdc6000-2b186bdc7000 rw-p 00015000 08:01 207                        /usr/lib64/libgcc_s-4.8.5-20150702.so.1
2b186bdc7000-2b186bdd1000 r-xp 00000000 08:01 385876225                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/List/Util/Util.so
2b186bdd1000-2b186bfd0000 ---p 0000a000 08:01 385876225                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/List/Util/Util.so
2b186bfd0000-2b186bfd1000 r--p 00009000 08:01 385876225                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/List/Util/Util.so
2b186bfd1000-2b186bfd2000 rw-p 0000a000 08:01 385876225                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/List/Util/Util.so
2b186bfd2000-2b186bfd5000 r-xp 00000000 08:01 465567927                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/Sys/Syslog/Syslog.so
2b186bfd5000-2b186c1d4000 ---p 00003000 08:01 465567927                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/Sys/Syslog/Syslog.so
2b186c1d4000-2b186c1d5000 r--p 00002000 08:01 465567927                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/Sys/Syslog/Syslog.so
2b186c1d5000-2b186c1d6000 rw-p 00003000 08:01 465567927                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/Sys/Syslog/Syslog.so
2b186c1d6000-2b186c1da000 r-xp 00000000 08:01 226531815                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/Digest/SHA1/SHA1.so
2b186c1da000-2b186c3d9000 ---p 00004000 08:01 226531815                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/Digest/SHA1/SHA1.so
2b186c3d9000-2b186c3da000 r--p 00003000 08:01 226531815                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/Digest/SHA1/SHA1.so
2b186c3da000-2b186c3db000 rw-p 00004000 08:01 226531815                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/Digest/SHA1/SHA1.so
2b186c3db000-2b186c3e2000 r-xp 00000000 08:01 251658431                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/Data/Dumper/Dumper.so
2b186c3e2000-2b186c5e1000 ---p 00007000 08:01 251658431                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/Data/Dumper/Dumper.so
2b186c5e1000-2b186c5e2000 r--p 00006000 08:01 251658431                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/Data/Dumper/Dumper.so
2b186c5e2000-2b186c5e3000 rw-p 00007000 08:01 251658431                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/Data/Dumper/Dumper.so
2b186c5e3000-2b186c5e7000 r-xp 00000000 08:01 306194735                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/Razor2/Preproc/deHTMLxs/deHTMLxs.so
2b186c5e7000-2b186c7e6000 ---p 00004000 08:01 306194735                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/Razor2/Preproc/deHTMLxs/deHTMLxs.so
2b186c7e6000-2b186c7e7000 r--p 00003000 08:01 306194735                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/Razor2/Preproc/deHTMLxs/deHTMLxs.so
2b186c7e7000-2b186c7e8000 rw-p 00004000 08:01 306194735                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/Razor2/Preproc/deHTMLxs/deHTMLxs.so
2b186c7e8000-2b186c84a000 r-xp 00000000 08:01 184550135                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/Net/SSLeay/SSLeay.so
2b186c84a000-2b186ca49000 ---p 00062000 08:01 184550135                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/Net/SSLeay/SSLeay.so
2b186ca49000-2b186ca4a000 r--p 00061000 08:01 184550135                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/Net/SSLeay/SSLeay.so
2b186ca4a000-2b186ca4c000 rw-p 00062000 08:01 184550135                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/Net/SSLeay/SSLeay.so
2b186ca4c000-2b186cab3000 r-xp 00000000 08:01 88239                      /usr/lib64/libssl.so.1.0.2k
2b186cab3000-2b186ccb3000 ---p 00067000 08:01 88239                      /usr/lib64/libssl.so.1.0.2k
2b186ccb3000-2b186ccb7000 r--p 00067000 08:01 88239                      /usr/lib64/libssl.so.1.0.2k
2b186ccb7000-2b186ccbe000 rw-p 0006b000 08:01 88239                      /usr/lib64/libssl.so.1.0.2k
2b186ccbe000-2b186cef4000 r-xp 00000000 08:01 88237                      /usr/lib64/libcrypto.so.1.0.2k
2b186cef4000-2b186d0f4000 ---p 00236000 08:01 88237                      /usr/lib64/libcrypto.so.1.0.2k
2b186d0f4000-2b186d110000 r--p 00236000 08:01 88237                      /usr/lib64/libcrypto.so.1.0.2k
2b186d110000-2b186d11d000 rw-p 00252000 08:01 88237                      /usr/lib64/libcrypto.so.1.0.2k
2b186d11d000-2b186d121000 rw-p 00000000 00:00 0
2b186d121000-2b186d136000 r-xp 00000000 08:01 88213                      /usr/lib64/libz.so.1.2.7
2b186d136000-2b186d335000 ---p 00015000 08:01 88213                      /usr/lib64/libz.so.1.2.7
2b186d335000-2b186d336000 r--p 00014000 08:01 88213                      /usr/lib64/libz.so.1.2.7
2b186d336000-2b186d337000 rw-p 00015000 08:01 88213                      /usr/lib64/libz.so.1.2.7
2b186d337000-2b186d381000 r-xp 00000000 08:01 88245                      /usr/lib64/libgssapi_krb5.so.2.2
2b186d381000-2b186d581000 ---p 0004a000 08:01 88245                      /usr/lib64/libgssapi_krb5.so.2.2
2b186d581000-2b186d582000 r--p 0004a000 08:01 88245                      /usr/lib64/libgssapi_krb5.so.2.2
2b186d582000-2b186d584000 rw-p 0004b000 08:01 88245                      /usr/lib64/libgssapi_krb5.so.2.2
2b186d584000-2b186d65d000 r-xp 00000000 08:01 89253                      /usr/lib64/libkrb5.so.3.3
2b186d65d000-2b186d85c000 ---p 000d9000 08:01 89253                      /usr/lib64/libkrb5.so.3.3
2b186d85c000-2b186d86a000 r--p 000d8000 08:01 89253                      /usr/lib64/libkrb5.so.3.3
2b186d86a000-2b186d86d000 rw-p 000e6000 08:01 89253                      /usr/lib64/libkrb5.so.3.3
2b186d86d000-2b186d870000 r-xp 00000000 08:01 4753                       /usr/lib64/libcom_err.so.2.1
2b186d870000-2b186da6f000 ---p 00003000 08:01 4753                       /usr/lib64/libcom_err.so.2.1
2b186da6f000-2b186da70000 r--p 00002000 08:01 4753                       /usr/lib64/libcom_err.so.2.1
2b186da70000-2b186da71000 rw-p 00003000 08:01 4753                       /usr/lib64/libcom_err.so.2.1
2b186da71000-2b186daa2000 r-xp 00000000 08:01 88249                      /usr/lib64/libk5crypto.so.3.1
2b186daa2000-2b186dca1000 ---p 00031000 08:01 88249                      /usr/lib64/libk5crypto.so.3.1
2b186dca1000-2b186dca3000 r--p 00030000 08:01 88249                      /usr/lib64/libk5crypto.so.3.1
2b186dca3000-2b186dca4000 rw-p 00032000 08:01 88249                      /usr/lib64/libk5crypto.so.3.1
2b186dca4000-2b186dcb2000 r-xp 00000000 08:01 89255                      /usr/lib64/libkrb5support.so.0.1
2b186dcb2000-2b186deb2000 ---p 0000e000 08:01 89255                      /usr/lib64/libkrb5support.so.0.1
2b186deb2000-2b186deb3000 r--p 0000e000 08:01 89255                      /usr/lib64/libkrb5support.so.0.1
2b186deb3000-2b186deb4000 rw-p 0000f000 08:01 89255                      /usr/lib64/libkrb5support.so.0.1
2b186deb4000-2b186deb7000 r-xp 00000000 08:01 95928                      /usr/lib64/libkeyutils.so.1.5
2b186deb7000-2b186e0b6000 ---p 00003000 08:01 95928                      /usr/lib64/libkeyutils.so.1.5
2b186e0b6000-2b186e0b7000 r--p 00002000 08:01 95928                      /usr/lib64/libkeyutils.so.1.5
2b186e0b7000-2b186e0b8000 rw-p 00003000 08:01 95928                      /usr/lib64/libkeyutils.so.1.5
2b186e0b8000-2b186e0ce000 r-xp 00000000 08:01 4727                       /usr/lib64/libresolv-2.17.so
2b186e0ce000-2b186e2ce000 ---p 00016000 08:01 4727                       /usr/lib64/libresolv-2.17.so
2b186e2ce000-2b186e2cf000 r--p 00016000 08:01 4727                       /usr/lib64/libresolv-2.17.so
2b186e2cf000-2b186e2d0000 rw-p 00017000 08:01 4727                       /usr/lib64/libresolv-2.17.so
2b186e2d0000-2b186e2d2000 rw-p 00000000 00:00 0
2b186e2d2000-2b186e2f6000 r-xp 00000000 08:01 116                        /usr/lib64/libselinux.so.1
2b186e2f6000-2b186e4f5000 ---p 00024000 08:01 116                        /usr/lib64/libselinux.so.1
2b186e4f5000-2b186e4f6000 r--p 00023000 08:01 116                        /usr/lib64/libselinux.so.1
2b186e4f6000-2b186e4f7000 rw-p 00024000 08:01 116                        /usr/lib64/libselinux.so.1
2b186e4f7000-2b186e4f9000 rw-p 00000000 00:00 0
2b186e4f9000-2b186e559000 r-xp 00000000 08:01 95930                      /usr/lib64/libpcre.so.1.2.0
2b186e559000-2b186e759000 ---p 00060000 08:01 95930                      /usr/lib64/libpcre.so.1.2.0
2b186e759000-2b186e75a000 r--p 00060000 08:01 95930                      /usr/lib64/libpcre.so.1.2.0
2b186e75a000-2b186e75b000 rw-p 00061000 08:01 95930                      /usr/lib64/libpcre.so.1.2.0
2b186e75b000-2b186e75e000 r-xp 00000000 08:01 67110374                   /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/BSD/Resource/Resource.so
2b186e75e000-2b186e95e000 ---p 00003000 08:01 67110374                   /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/BSD/Resource/Resource.so
2b186e95e000-2b186e95f000 r--p 00003000 08:01 67110374                   /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/BSD/Resource/Resource.so
2b186e95f000-2b186e960000 rw-p 00004000 08:01 67110374                   /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/BSD/Resource/Resource.so
2b186e960000-2b186ea9d000 r-xp 00000000 08:01 583019704                  /var/lib/spamassassin/compiled/5.030/3.004004/auto/Mail/SpamAssassin/CompiledRegexps/body_0/body_0.so
2b186ea9d000-2b186ec9c000 ---p 0013d000 08:01 583019704                  /var/lib/spamassassin/compiled/5.030/3.004004/auto/Mail/SpamAssassin/CompiledRegexps/body_0/body_0.so
2b186ec9c000-2b186ec9d000 r--p 0013c000 08:01 583019704                  /var/lib/spamassassin/compiled/5.030/3.004004/auto/Mail/SpamAssassin/CompiledRegexps/body_0/body_0.so
2b186ec9d000-2b186ec9e000 rw-p 0013d000 08:01 583019704                  /var/lib/spamassassin/compiled/5.030/3.004004/auto/Mail/SpamAssassin/CompiledRegexps/body_0/body_0.so
2b186ec9e000-2b186eca8000 r-xp 00000000 08:01 243269797                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/DB_File/DB_File.so
2b186eca8000-2b186eea7000 ---p 0000a000 08:01 243269797                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/DB_File/DB_File.so
2b186eea7000-2b186eea8000 r--p 00009000 08:01 243269797                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/DB_File/DB_File.so
2b186eea8000-2b186eea9000 rw-p 0000a000 08:01 243269797                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/5.30.0/x86_64-linux-64int/auto/DB_File/DB_File.so
2b186eea9000-2b186f05e000 r-xp 00000000 08:01 4767                       /usr/lib64/libdb-5.3.so
2b186f05e000-2b186f25e000 ---p 001b5000 08:01 4767                       /usr/lib64/libdb-5.3.so
2b186f25e000-2b186f265000 r--p 001b5000 08:01 4767                       /usr/lib64/libdb-5.3.so
2b186f265000-2b186f268000 rw-p 001bc000 08:01 4767                       /usr/lib64/libdb-5.3.so
2b186f268000-2b186f270000 r-xp 00000000 08:01 218107256                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/Crypt/OpenSSL/Bignum/Bignum.so
2b186f270000-2b186f46f000 ---p 00008000 08:01 218107256                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/Crypt/OpenSSL/Bignum/Bignum.so
2b186f46f000-2b186f470000 r--p 00007000 08:01 218107256                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/Crypt/OpenSSL/Bignum/Bignum.so
2b186f470000-2b186f471000 rw-p 00008000 08:01 218107256                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/Crypt/OpenSSL/Bignum/Bignum.so
2b186f471000-2b186f478000 r-xp 00000000 08:01 138414030                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/Crypt/OpenSSL/RSA/RSA.so
2b186f478000-2b186f677000 ---p 00007000 08:01 138414030                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/Crypt/OpenSSL/RSA/RSA.so
2b186f677000-2b186f678000 r--p 00006000 08:01 138414030                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/Crypt/OpenSSL/RSA/RSA.so
2b186f678000-2b186f679000 rw-p 00007000 08:01 138414030                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/Crypt/OpenSSL/RSA/RSA.so
2b186f679000-2b186f67e000 r-xp 00000000 08:01 285214567                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/CDB_File/CDB_File.so
2b186f67e000-2b186f87d000 ---p 00005000 08:01 285214567                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/CDB_File/CDB_File.so
2b186f87d000-2b186f87e000 r--p 00004000 08:01 285214567                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/CDB_File/CDB_File.so
2b186f87e000-2b186f87f000 rw-p 00005000 08:01 285214567                  /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/CDB_File/CDB_File.so
2b186f87f000-2b186fb55000 r--s 00000000 08:01 339740143                  /var/cpanel/locale/en.cdb
2b186fb55000-2b186fcb1000 r-xp 00000000 08:01 67110346                   /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/Encode/CN/CN.so
2b186fcb1000-2b186feb0000 ---p 0015c000 08:01 67110346                   /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/Encode/CN/CN.so
2b186feb0000-2b186ff4c000 r--p 0015b000 08:01 67110346                   /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/Encode/CN/CN.so
2b186ff4c000-2b186ff4d000 rw-p 001f7000 08:01 67110346                   /usr/local/cpanel/3rdparty/perl/530/lib/perl5/cpanel_lib/x86_64-linux-64int/auto/Encode/CN/CN.so
7ffc2b753000-7ffc2b774000 rw-p 00000000 00:00 0                          [stack]
7ffc2b7cf000-7ffc2b7d1000 r-xp 00000000 00:00 0                          [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0                  [vsyscall]
 

Michael-Inet

Well-Known Member
Feb 20, 2014
117
15
68
Nashville, TN, USA
cPanel Access Level
Root Administrator
This would typically be installed if you had a virtuozzo based cloud server.

What's the output of virt-what
kvm

yeah, I should have added that to begin with :(

Thanks,
Michael