Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : Suspicious Processes!

[Rezaa]

Does anyone knows what's the meaning of the attached processes and how to fix them?

[GORF]

Are you updating the box? If it's not you or auto-updates, then I would Kill the process and run a rootkit hunter.

[CH-Shaun]

That looks like an ordinary cPanel update. By default, cPanel set it to automatically check for new package upgrades each night.

[Rezaa]

Originally Posted by GORF

Are you updating the box? If it's not you or auto-updates, then I would Kill the process and run a rootkit hunter.

No, I'm not updating the box. I already have a rootkit hunter running on the server, I'll check it's reports.
thanks

Originally Posted by CH-Shaun

That looks like an ordinary cPanel update. By default, cPanel set it to automatically check for new package upgrades each night.

Thank you, I hope it's a cpanel update. but it's using more than %70 of my cpu! is it normal?

[Steven]

That is the yum package manager, and that is indeed the 'command' that the upcp (cpanel update script) sends. You should see that command in your process list every day around the same time if your cpanel is set to auto update.

[CoderJosh]

The second process in your list is the MySQL database server (mysqld).