maxo,
thanks for the link
mouseattack,
This is what came out when I typed ps -aux, I dont think I's seeing anything that indicates apf running
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.0 0.0 1520 480 ? S Mar22 0:07 init
root 2 0.0 0.0 0 0 ? SW Mar22 0:00 [migration/0]
root 3 0.0 0.0 0 0 ? SW Mar22 0:00 [migration/1]
root 4 0.0 0.0 0 0 ? SW Mar22 0:00 [migration/2]
root 5 0.0 0.0 0 0 ? SW Mar22 0:00 [migration/3]
root 6 0.0 0.0 0 0 ? SW Mar22 0:00 [keventd]
root 7 0.0 0.0 0 0 ? SWN Mar22 0:00 [ksoftirqd/0]
root 8 0.0 0.0 0 0 ? SWN Mar22 0:00 [ksoftirqd/1]
root 9 0.0 0.0 0 0 ? SWN Mar22 0:00 [ksoftirqd/2]
root 10 0.0 0.0 0 0 ? SWN Mar22 0:00 [ksoftirqd/3]
root 13 0.0 0.0 0 0 ? SW Mar22 0:00 [bdflush]
root 11 0.0 0.0 0 0 ? SW Mar22 0:02 [kswapd]
root 12 0.0 0.0 0 0 ? SW Mar22 0:25 [kscand]
root 14 0.0 0.0 0 0 ? SW Mar22 0:14 [kupdated]
root 15 0.0 0.0 0 0 ? SW Mar22 0:00 [mdrecoveryd]
root 19 0.0 0.0 0 0 ? SW Mar22 0:01 [kjournald]
root 74 0.0 0.0 0 0 ? SW Mar22 0:00 [khubd]
root 645 0.0 0.0 0 0 ? SW Mar22 0:00 [kjournald]
root 646 0.0 0.0 0 0 ? SW Mar22 0:00 [kjournald]
root 650 0.0 0.0 0 0 ? SW Mar22 0:02 [kjournald]
root 657 0.0 0.0 0 0 ? SW Mar22 0:00 [kjournald]
root 661 0.0 0.0 0 0 ? SW Mar22 0:32 [kjournald]
root 680 0.0 0.0 0 0 ? SW Mar22 0:06 [kjournald]
root 2471 0.0 0.0 1580 552 ? S Mar22 0:02 syslogd -m 0
root 2475 0.0 0.0 1528 456 ? S Mar22 0:00 klogd -x
root 2485 0.0 0.0 1520 440 ? S Mar22 0:08 irqbalance
root 2514 0.0 0.0 1580 380 ? S Mar22 0:00 mdadm --monitor -
root 2530 0.0 0.0 83560 452 ? S Mar22 0:17 /sbin/auditd
nobody 2592 0.0 0.1 4280 1344 ? SN Mar22 0:00 proftpd: (accepti
root 2658 0.0 0.0 2136 740 ? S Mar22 0:00 xinetd -stayalive
root 2676 0.0 0.1 6180 1848 ? S Mar22 0:02 chkservd
mailnull 2729 0.0 0.1 6620 1156 ? S Mar22 0:00 /usr/sbin/exim -b
mailnull 2733 0.0 0.0 6584 988 ? S Mar22 0:00 /usr/sbin/exim -t
root 2740 0.0 0.1 2904 1384 ? S Mar22 0:10 antirelayd
root 2757 0.0 0.1 9756 1556 ? SN Mar22 0:05 /usr/local/apache
bin 2815 0.0 0.0 2012 532 ? S Mar22 0:00 /usr/sbin/cannase
wnn 2877 0.0 0.0 5292 504 ? S Mar22 0:00 /usr/bin/jserver
root 3094 0.0 0.0 3556 560 ? S Mar22 0:00 rhnsd --interval
root 3123 0.0 0.0 1528 500 ? S Mar22 0:00 /usr/sbin/portsen
root 3147 0.0 0.0 1500 428 tty1 S Mar22 0:00 /sbin/mingetty tt
root 3148 0.0 0.0 1500 428 tty2 S Mar22 0:00 /sbin/mingetty tt
root 3149 0.0 0.0 1500 428 tty3 S Mar22 0:00 /sbin/mingetty tt
root 3150 0.0 0.0 1500 428 tty4 S Mar22 0:00 /sbin/mingetty tt
root 3151 0.0 0.0 1500 428 tty5 S Mar22 0:00 /sbin/mingetty tt
root 3152 0.0 0.0 1500 428 tty6 S Mar22 0:00 /sbin/mingetty tt
root 3153 0.0 0.0 1500 428 ttyS0 S Mar22 0:00 /sbin/mingetty tt
root 9208 0.0 0.0 2124 856 ? S Mar22 0:00 /bin/sh /usr/bin/
mysql 9244 0.0 0.2 57044 2556 ? SN Mar22 0:00 /usr/sbin/mysqld
mysql 9245 0.0 0.2 57044 2556 ? SN Mar22 0:02 /usr/sbin/mysqld
mysql 9246 0.0 0.2 57044 2556 ? SN Mar22 0:00 /usr/sbin/mysqld
mysql 19049 0.0 0.2 57044 2556 ? SN Mar22 0:00 /usr/sbin/mysqld
root 19187 0.0 0.1 3652 1520 ? S Mar22 0:00 /usr/sbin/sshd
mysql 19248 0.0 0.2 57044 2556 ? SN Mar22 0:00 /usr/sbin/mysqld
root 25879 0.0 0.0 1828 744 ? S Mar22 0:01 /usr/sbin/smartd
root 26330 0.0 0.5 10072 5616 ? S Mar22 0:27 /usr/local/bin/pe
root 31014 0.0 0.1 7788 1632 ? S Mar22 0:00 smbmount //70.85.
root 32149 0.0 0.0 1588 644 ? S Mar22 0:01 crond
mysql 18734 0.0 0.2 57044 2556 ? SN Mar23 0:00 /usr/sbin/mysqld
nobody 28092 0.0 0.4 11088 4680 ? SN Mar23 0:00 /usr/local/apache
nobody 28093 0.0 0.4 11112 4952 ? SN Mar23 0:00 /usr/local/apache
nobody 28094 0.0 0.4 11344 5116 ? SN Mar23 0:00 /usr/local/apache
nobody 28095 0.0 0.5 11392 5268 ? SN Mar23 0:00 /usr/local/apache
nobody 28096 0.0 0.5 11372 5176 ? SN Mar23 0:00 /usr/local/apache
nobody 28513 0.0 0.4 10960 4860 ? SN Mar23 0:00 /usr/local/apache
nobody 28514 0.0 0.4 10992 4352 ? SN Mar23 0:00 /usr/local/apache
nobody 28515 0.0 0.4 11028 4508 ? SN Mar23 0:00 /usr/local/apache
nobody 28516 0.0 0.4 11188 4656 ? SN Mar23 0:00 /usr/local/apache
nobody 28736 0.0 0.4 11024 4424 ? SN Mar23 0:00 /usr/local/apache
root 13458 0.0 1.9 21860 19852 ? SN Mar23 0:00 /usr/bin/spamd -d
root 13469 0.0 2.0 22412 20556 ? SN Mar23 0:01 spamd child
root 13470 0.0 2.0 22412 20560 ? SN Mar23 0:01 spamd child
root 13471 0.0 2.0 22384 20552 ? SN Mar23 0:01 spamd child
root 13472 0.0 2.0 22416 20564 ? SN Mar23 0:01 spamd child
root 13473 0.0 2.0 22408 20548 ? SN Mar23 0:01 spamd child
named 19491 0.0 0.3 56080 3512 ? S 00:01 0:02 /usr/sbin/named -
mailnull 19576 0.0 0.3 5536 3996 ? SN 00:02 0:01 /usr/bin/perl /us
root 19580 0.0 0.7 9516 8068 ? S 00:02 0:00 cpsrvd - waiting
root 19590 0.0 0.5 7256 5588 ? SN 00:02 0:00 cpanellogd - slee
root 19595 0.0 0.6 8160 6748 ? SN 00:02 0:00 cppop - accepting
nobody 19599 0.0 0.1 3392 2036 ? S 00:02 0:00 entropychat
nobody 19603 0.0 0.0 1736 628 ? SN 00:02 0:00 /usr/local/cpanel
cpanel 19626 0.0 0.1 3664 1660 ? SN 00:02 0:00 /usr/bin/stunnel-
mailman 19630 0.0 0.4 7216 4764 ? SN 00:02 0:00 /usr/bin/python2
mailman 19631 0.0 0.4 7184 4708 ? SN 00:02 0:05 /usr/bin/python2
mailman 19632 0.0 0.4 7132 4720 ? SN 00:02 0:06 /usr/bin/python2
mailman 19633 0.0 0.4 7120 4712 ? SN 00:02 0:06 /usr/bin/python2
mailman 19634 0.0 0.4 7176 4708 ? SN 00:02 0:03 /usr/bin/python2
mailman 19635 0.0 0.4 7204 4744 ? SN 00:02 0:03 /usr/bin/python2
mailman 19636 0.0 0.4 7268 4792 ? SN 00:02 0:04 /usr/bin/python2
mailman 19637 0.0 0.4 7172 4708 ? SN 00:02 0:06 /usr/bin/python2
mailman 19638 0.0 0.4 7168 4708 ? SN 00:02 0:00 /usr/bin/python2
root 6257 0.0 0.2 6872 2164 ? S 11:02 0:00 sshd: root@pts/2
root 6259 0.0 0.1 4460 1284 pts/2 S 11:03 0:00 -bash
root 6325 0.0 0.0 2744 760 pts/2 R 11:04 0:00 ps -aux