The Planet Forums > /scripts/upcp -- Hidden Pid detected!

Full Version: /scripts/upcp -- Hidden Pid detected!

The Planet Forums > Control Panels > cPanel/WHM

ChrisM

Jan 9 2004, 07:05 AM

I've been getting this /scripts/upcp cron e-mail ever since I installed Tripwire (at least that's the approximate time-frame, about 3 weeks ago). Is it related, do you think? How do I get rid of this error?

QUOTE

Hidden Pid detected! [pid 18835]
hidden from ps: [yes]
binary location: [/usr/sbin/named]

Rebuilding Process List...Done
Hidden Pid detected! [pid 18836]
hidden from ps: [yes]
binary location: [/usr/sbin/named]

Rebuilding Process List...Done
Hidden Pid detected! [pid 18837]
hidden from ps: [yes]
binary location: [/usr/sbin/named]

It also gets reported as a Trojan in WHM. Cron e-mail subject "Trojan Horses Detected by (WHM)..."

I'm fairly confident that it's not an actual Trojan, for various reasons. How do I get rid of it?

DataDork

Jan 9 2004, 07:28 PM

I have emailed cPanel support on this topic and got a reply stating that this is a known bug for RHE 3.0 and that is has been resolved in the "edge" release. Since I refuse to upgrade my production boxes to "edge", I will have to wait until it goes stable for this to be resolved. I hope this helps...

ChrisM

Jan 9 2004, 07:31 PM

Thanks for the info. James. That does put my mind at ease a bit.

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.