Results 1 to 6 of 6
  1. #1

    What is this perl running on my website?

    Hello

    What is this perl running on my website?
    How can I terminate it?
    Attached Thumbnails Attached Thumbnails Screenshot.png  

  2. #2
    Join Date
    Mar 2003
    Location
    Canada
    Posts
    8,910
    Is it running as the user, or as nobody or as root? If it's running as the user you can do a pkill -u user via SSH to kill all of your processes; it will also log you out of SSH. You will then have to determine where it came from, in some cases it could be something malicious... You'll want to check your website access logs and the Apache suexec log to see if anything helpful has been recorded. Also look around your public_html directory, cgi-bin directory, etc, for any unusual files.
    Patrick William | RACK911 Labs | Software Security Auditing
    400+ Vulnerabilities Found - Quote @ https://www.RACK911Labs.com

    www.HostingSecList.com - Security notices for the hosting community.

  3. #3
    cd /tmp

    ls -al *.pl


    and check if any bot script is present and remove it
    Hillock Hosting
    Unlimited Hosting Solution
    Reliable Shared | Reseller| VPS Hosting Services

  4. #4
    ls -al *.pl
    returns none

    I tried to kill the process with pkill -u user
    and no help

  5. #5
    Join Date
    May 2001
    Location
    HK
    Posts
    3,076

    *

    Do an lsof and see the open files.

    That's what I usually do when I come across something like this. Don't kill anything until you are sure where this originate from. You're wiping out the evidence if you kill.

  6. #6
    Join Date
    May 2010
    Location
    Toronto, Canada
    Posts
    454
    ls -la /tmp , perl scripts dont have to be .pl to run. Sometimes people name the scripts with the .txt extension.

    View anything suspicious , and ensure all the software on your server is up to date. Consider employing mod_security.
    Stack Star | Shift8 Web
    ★ Managed VPS Hosting ★ Managed Wordpress Hosting ★ Managed Dedicated Hosting ★ Web Development ★ Web Design
    Managed Wordpress Hosting Web Design Toronto

Similar Threads

  1. need help running perl script on cron
    By kafloofen in forum Hosting Security and Technology
    Replies: 4
    Last Post: 01-25-2007, 05:14 PM
  2. Running Perl page in admserv
    By gnetwerker in forum Dedicated Server
    Replies: 2
    Last Post: 10-10-2006, 01:45 AM
  3. Which OS ? for server that running only perl scripts ?
    By goolex in forum Dedicated Server
    Replies: 1
    Last Post: 09-03-2005, 09:37 AM
  4. Replies: 1
    Last Post: 06-25-2004, 08:27 PM
  5. perl scripts not running...
    By beers in forum Dedicated Server
    Replies: 5
    Last Post: 04-05-2004, 08:33 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •