suspicious process

thongster · #1 (**permalink**) 26-07-11, 07:40 AM

I am getting continuous messages about 2 suspicious processes and excessive usage

Can someone have a look urgently please

Also I still have no access to my server

thongster · #2 (**permalink**) 26-07-11, 07:50 AM

one of the excessive usage files is called xfs, according to google this has been used in rootkits

stuartb4u · #3 (**permalink**) 26-07-11, 09:22 AM

Quote:

Originally Posted by thongster

one of the excessive usage files is called xfs, according to google this has been used in rootkits

Hello,
I have monitored your server for a while and noticed that clamAV is using heavy resources on the server.

thongster · #4 (**permalink**) 26-07-11, 09:36 AM

clam av and xfs are using excessive resources plus I have no access to the server

can you find the reason and fix it asap plus give me access to the server

thongster · #5 (**permalink**) 26-07-11, 03:55 PM

Is everybody on holiday ?

stuartb4u · #6 (**permalink**) 27-07-11, 03:31 AM

We apologize for delayed response.
Can you please confirm if you have requested for any access restrictions on the server?
As of now I'm removing restrictions, and you should be able to access the server.

thongster · #7 (**permalink**) 27-07-11, 07:32 AM

hi Stuart, if you have removed the restrictions you have let the hackers back in...

I am guessing from your spelling and time of posting you are not from the uk

Where are the actual staff that work for this company in the uk

**Harry** · #8 (**permalink**) 27-07-11, 08:44 AM

Are you able to login to your server now ?
I will inform Stuart to revert the changes done on your server as per your request.

thongster · #9 (**permalink**) 27-07-11, 08:54 AM

Where are the uk technical staff

**Harry** · #10 (**permalink**) 27-07-11, 10:47 AM

Quote:

Originally Posted by thongster

Where are the uk technical staff

We are based in UK. Let me know if you are still facing any issue or need any assistance.

**adam_sales** · #11 (**permalink**) 27-07-11, 10:49 AM

looking into this further,

i will contact via a private message

**whuk-cristiano** · #12 (**permalink**) 27-07-11, 11:04 AM

@thongster

Can you elaborate as to how exactly you are not able to access server ? Via SSH OR Plesk panel ? Also, if you could PM the emails you have been receiving, I will check and see as to what can be done.