UID PID PPID C STIME TTY TIME CMD root 1 0 0 Jul10 ? 00:04:40 /sbin/init root 2 0 0 Jul10 ? 00:00:00 [kthreadd] root 3 2 0 Jul10 ? 00:00:03 [migration/0] root 4 2 0 Jul10 ? 00:00:36 [ksoftirqd/0] root 5 2 0 Jul10 ? 00:00:00 [stopper/0] root 6 2 0 Jul10 ? 00:00:02 [watchdog/0] root 7 2 0 Jul10 ? 00:00:17 [migration/1] root 8 2 0 Jul10 ? 00:00:00 [stopper/1] root 9 2 0 Jul10 ? 00:00:12 [ksoftirqd/1] root 10 2 0 Jul10 ? 00:00:01 [watchdog/1] root 11 2 0 Jul10 ? 00:00:07 [migration/2] root 12 2 0 Jul10 ? 00:00:00 [stopper/2] root 13 2 0 Jul10 ? 00:00:16 [ksoftirqd/2] root 14 2 0 Jul10 ? 00:00:01 [watchdog/2] root 15 2 0 Jul10 ? 00:00:04 [migration/3] root 16 2 0 Jul10 ? 00:00:00 [stopper/3] root 17 2 0 Jul10 ? 00:00:16 [ksoftirqd/3] root 18 2 0 Jul10 ? 00:00:01 [watchdog/3] root 19 2 0 Jul10 ? 00:01:22 [events/0] root 20 2 0 Jul10 ? 00:01:02 [events/1] root 21 2 0 Jul10 ? 00:09:52 [events/2] root 22 2 0 Jul10 ? 00:01:25 [events/3] root 23 2 0 Jul10 ? 00:00:00 [events/0] root 24 2 0 Jul10 ? 00:00:00 [events/1] root 25 2 0 Jul10 ? 00:00:00 [events/2] root 26 2 0 Jul10 ? 00:00:00 [events/3] root 27 2 0 Jul10 ? 00:00:00 [events_long/0] root 28 2 0 Jul10 ? 00:00:00 [events_long/1] root 29 2 0 Jul10 ? 00:00:00 [events_long/2] root 30 2 0 Jul10 ? 00:00:00 [events_long/3] root 31 2 0 Jul10 ? 00:00:00 [events_power_ef] root 32 2 0 Jul10 ? 00:00:00 [events_power_ef] root 33 2 0 Jul10 ? 00:00:00 [events_power_ef] root 34 2 0 Jul10 ? 00:00:00 [events_power_ef] root 35 2 0 Jul10 ? 00:00:00 [cgroup] root 36 2 0 Jul10 ? 00:00:00 [khelper] root 37 2 0 Jul10 ? 00:00:00 [netns] root 38 2 0 Jul10 ? 00:00:00 [async/mgr] root 39 2 0 Jul10 ? 00:00:00 [pm] root 40 2 0 Jul10 ? 00:00:05 [sync_supers] root 41 2 0 Jul10 ? 00:00:00 [bdi-default] root 42 2 0 Jul10 ? 00:00:00 [kintegrityd/0] root 43 2 0 Jul10 ? 00:00:00 [kintegrityd/1] root 44 2 0 Jul10 ? 00:00:00 [kintegrityd/2] root 45 2 0 Jul10 ? 00:00:00 [kintegrityd/3] root 46 2 0 Jul10 ? 00:21:33 [kblockd/0] root 47 2 0 Jul10 ? 00:00:18 [kblockd/1] root 48 2 0 Jul10 ? 00:00:05 [kblockd/2] root 49 2 0 Jul10 ? 00:00:01 [kblockd/3] root 50 2 0 Jul10 ? 00:00:00 [kacpid] root 51 2 0 Jul10 ? 00:00:00 [kacpi_notify] root 52 2 0 Jul10 ? 00:00:00 [kacpi_hotplug] root 53 2 0 Jul10 ? 00:00:00 [ata_aux] root 54 2 0 Jul10 ? 00:00:00 [ata_sff/0] root 55 2 0 Jul10 ? 00:00:00 [ata_sff/1] root 56 2 0 Jul10 ? 00:00:00 [ata_sff/2] root 57 2 0 Jul10 ? 00:00:00 [ata_sff/3] root 58 2 0 Jul10 ? 00:00:00 [ksuspend_usbd] root 59 2 0 Jul10 ? 00:00:00 [khubd] root 60 2 0 Jul10 ? 00:00:00 [kseriod] root 61 2 0 Jul10 ? 00:00:00 [md/0] root 62 2 0 Jul10 ? 00:00:00 [md/1] root 63 2 0 Jul10 ? 00:00:00 [md/2] root 64 2 0 Jul10 ? 00:00:00 [md/3] root 65 2 0 Jul10 ? 00:00:00 [md_misc/0] root 66 2 0 Jul10 ? 00:00:00 [md_misc/1] root 67 2 0 Jul10 ? 00:00:00 [md_misc/2] root 68 2 0 Jul10 ? 00:00:00 [md_misc/3] root 69 2 0 Jul10 ? 00:00:00 [linkwatch] root 71 2 0 Jul10 ? 00:00:01 [khungtaskd] root 72 2 0 Jul10 ? 00:00:00 [lru-add-drain/0] root 73 2 0 Jul10 ? 00:00:01 [lru-add-drain/1] root 74 2 0 Jul10 ? 00:00:01 [lru-add-drain/2] root 75 2 0 Jul10 ? 00:00:01 [lru-add-drain/3] root 76 2 0 Jul10 ? 00:35:02 [kswapd0] root 77 2 0 Jul10 ? 00:00:00 [ksmd] root 78 2 0 Jul10 ? 00:00:45 [khugepaged] root 79 2 0 Jul10 ? 00:00:00 [aio/0] root 80 2 0 Jul10 ? 00:00:00 [aio/1] root 81 2 0 Jul10 ? 00:00:00 [aio/2] root 82 2 0 Jul10 ? 00:00:00 [aio/3] root 83 2 0 Jul10 ? 00:00:00 [crypto/0] root 84 2 0 Jul10 ? 00:00:00 [crypto/1] root 85 2 0 Jul10 ? 00:00:00 [crypto/2] root 86 2 0 Jul10 ? 00:00:00 [crypto/3] root 93 2 0 Jul10 ? 00:00:00 [kthrotld/0] root 94 2 0 Jul10 ? 00:00:00 [kthrotld/1] root 95 2 0 Jul10 ? 00:00:00 [kthrotld/2] root 96 2 0 Jul10 ? 00:00:00 [kthrotld/3] root 98 2 0 Jul10 ? 00:00:00 [kpsmoused] root 99 2 0 Jul10 ? 00:00:00 [usbhid_resumer] root 100 2 0 Jul10 ? 00:00:00 [deferwq] root 132 2 0 Jul10 ? 00:00:00 [kdmremove] root 133 2 0 Jul10 ? 00:00:00 [kstriped] root 362 2 0 Jul10 ? 00:00:00 [scsi_eh_0] root 363 2 0 Jul10 ? 00:00:00 [scsi_eh_1] root 542 2 0 Jul10 ? 00:29:23 [jbd2/sda3-8] root 543 2 0 Jul10 ? 00:00:00 [ext4-dio-unwrit] root 648 1 0 Jul10 ? 00:00:00 /sbin/udevd -d root 788 2 0 Jul10 ? 00:01:52 [vballoon] apache 821 27961 0 Aug12 ? 00:00:00 python /opt/coldfusion8/wwwroot/userfiles/file/cmnd_scan.py root 1099 2 0 Jul10 ? 00:00:00 [jbd2/sda1-8] root 1100 2 0 Jul10 ? 00:00:00 [ext4-dio-unwrit] root 1164 2 0 Jul10 ? 00:00:00 [kauditd] root 1166 1 0 Jul10 ? 00:01:11 /usr/bin/sw-engine -c /usr/local/psa/admin/conf/php.ini /usr/local/psa/admin/bin/modules/watchdog/wdcollect -c /usr/local/psa/etc/modules/watchdog/wdcollect.inc.php root 1369 2 0 Jul10 ? 00:50:19 [flush-8:0] root 1550 1 0 Jul10 ? 04:09:42 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5 root 1584 1 0 Jul10 ? 00:01:18 irqbalance --pid=/var/run/irqbalance.pid apache 1692 821 0 Aug12 ? 00:00:00 python /opt/coldfusion8/wwwroot/userfiles/file/cmnd_scan.py dbus 2494 1 0 Jul10 ? 00:00:01 dbus-daemon --system root 2515 1 0 Jul10 ? 00:00:00 /usr/sbin/acpid 68 2527 1 0 Jul10 ? 00:00:06 hald root 2528 2527 0 Jul10 ? 00:00:00 hald-runner root 2560 2528 0 Jul10 ? 00:00:00 hald-addon-input: Listening on /dev/input/event2 /dev/input/event0 68 2572 2528 0 Jul10 ? 00:00:00 hald-addon-acpi: listening on acpid socket /var/run/acpid.socket root 2704 1 0 Jul10 ? 00:04:30 /usr/sbin/snmpd -LS0-6d -Lf /dev/null -p /var/run/snmpd.pid root 4100 1 0 Jul10 ? 00:09:25 /usr/sbin/sshd root 4111 1 0 Jul10 ? 00:01:14 xinetd -stayalive -pidfile /var/run/xinetd.pid ntp 4122 1 0 Jul10 ? 00:00:15 ntpd -u ntp:ntp -p /var/run/ntpd.pid -g root 4150 1 0 Jul10 ? 00:00:00 /usr/sbin/courierlogger -name=courier-authdaemon -pid=/var/run/courier-authdaemon.pid -lockfile=/var/lock/subsys/courier-authdaemon -start /usr/lib64/courier-authlib/authdaemond root 4151 4150 0 Jul10 ? 00:00:00 /usr/lib64/courier-authlib/authdaemond root 4161 1 0 Jul10 ? 00:00:28 /usr/sbin/courierlogger -name=imapd -pid=/var/run/imapd.pid -lockfile=/var/lock/subsys/courier-imapd -start -name=courier-imapd /usr/lib64/couriertcpd -address=0 -maxprocs=1024 -maxperip=20 -nodnslookup -noidentlookup 143 /usr/sbin/imaplogin /usr/bin/imapd Maildir root 4162 4161 0 Jul10 ? 00:00:16 /usr/lib64/couriertcpd -address=0 -maxprocs=1024 -maxperip=20 -nodnslookup -noidentlookup 143 /usr/sbin/imaplogin /usr/bin/imapd Maildir root 4172 1 0 Jul10 ? 00:00:07 /usr/sbin/courierlogger -name=imapd-ssl -pid=/var/run/imapd-ssl.pid -lockfile=/var/lock/subsys/courier-imaps -start -name=courier-imaps /usr/lib64/couriertcpd -address=0 -maxprocs=1024 -maxperip=20 -nodnslookup -noidentlookup 993 /usr/bin/couriertls -server -tcpd /usr/sbin/imaplogin /usr/bin/imapd Maildir root 4173 4172 0 Jul10 ? 00:00:14 /usr/lib64/couriertcpd -address=0 -maxprocs=1024 -maxperip=20 -nodnslookup -noidentlookup 993 /usr/bin/couriertls -server -tcpd /usr/sbin/imaplogin /usr/bin/imapd Maildir root 4178 4151 0 Jul10 ? 00:00:01 /usr/lib64/courier-authlib/authdaemond root 4179 4151 0 Jul10 ? 00:00:01 /usr/lib64/courier-authlib/authdaemond root 4180 4151 0 Jul10 ? 00:00:01 /usr/lib64/courier-authlib/authdaemond root 4181 4151 0 Jul10 ? 00:00:01 /usr/lib64/courier-authlib/authdaemond root 4182 4151 0 Jul10 ? 00:00:01 /usr/lib64/courier-authlib/authdaemond root 4187 1 0 Jul10 ? 00:00:10 /usr/sbin/courierlogger -name=pop3d -pid=/var/run/pop3d.pid -lockfile=/var/lock/subsys/courier-pop3d -start -name=courier-pop3d /usr/lib64/couriertcpd -address=0 -maxprocs=1024 -maxperip=20 -nodnslookup -noidentlookup 110 /usr/sbin/pop3login /usr/lib64/plesk-9.0/pop3login Maildir root 4188 4187 0 Jul10 ? 00:00:12 /usr/lib64/couriertcpd -address=0 -maxprocs=1024 -maxperip=20 -nodnslookup -noidentlookup 110 /usr/sbin/pop3login /usr/lib64/plesk-9.0/pop3login Maildir root 4198 1 0 Jul10 ? 00:00:08 /usr/sbin/courierlogger -name=pop3d-ssl -pid=/var/run/pop3d-ssl.pid -lockfile=/var/lock/subsys/courier-pop3s -start -name=courier-pop3s /usr/lib64/couriertcpd -address=0 -maxprocs=1024 -maxperip=20 -nodnslookup -noidentlookup 995 /usr/bin/couriertls -server -tcpd /usr/sbin/pop3login /usr/lib64/plesk-9.0/pop3login Maildir root 4199 4198 0 Jul10 ? 00:00:11 /usr/lib64/couriertcpd -address=0 -maxprocs=1024 -maxperip=20 -nodnslookup -noidentlookup 995 /usr/bin/couriertls -server -tcpd /usr/sbin/pop3login /usr/lib64/plesk-9.0/pop3login Maildir postfix 4214 1 0 Jul10 ? 00:12:38 /usr/lib64/plesk-9.0/psa-pc-remote -p inet:12768@127.0.0.1 root 4232 1 0 Jul10 ? 00:03:51 /usr/sbin/abrtd root 4259 1 0 Jul10 ? 00:01:23 php-fpm: master process (/etc/php-fpm.conf) apache 4260 4259 0 Jul10 ? 00:00:00 php-fpm: pool www apache 4261 4259 0 Jul10 ? 00:00:00 php-fpm: pool www apache 4262 4259 0 Jul10 ? 00:00:00 php-fpm: pool www apache 4263 4259 0 Jul10 ? 00:00:00 php-fpm: pool www apache 4264 4259 0 Jul10 ? 00:00:00 php-fpm: pool www root 4310 1 0 Jul10 ? 00:00:35 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf) root 4357 1 0 Jul10 ? 00:00:00 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --pid-file=/var/run/mysqld/mysqld.pid --basedir=/usr --user=mysql mysql 4567 4357 5 Jul10 ? 1-22:37:16 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql --log-error=/var/lib/mysql/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock named 4646 1 0 Jul10 ? 00:04:47 /usr/sbin/named -u named -c /etc/named.conf -u named -n 2 -t /var/named/chroot root 4815 1 0 Jul10 ? 00:09:21 /usr/libexec/postfix/master postfix 4818 4815 0 Jul10 ? 00:04:40 qmgr -l -t fifo -u root 4912 1 0 Jul10 ? 00:01:05 /usr/sbin/httpd apache 4920 4912 0 Jul10 ? 00:00:23 /usr/sbin/httpd postfix 4971 4815 0 Jul10 ? 00:01:14 tlsmgr -l -t unix -u root 5023 1 0 Jul10 ? 00:00:17 /usr/bin/sw-engine -c /usr/local/psa/admin/conf/php.ini /usr/lib64/plesk-9.0/psa-health-monitor-notification.php root 5036 1 0 Jul10 ? 00:23:40 /usr/sbin/sw-collectd -C /etc/sw-collectd/collectd.conf apache 5169 27961 0 Aug11 ? 00:00:00 which pkexec; ls -la /usr/bin/pkexec /usr/libexec/polkit-1/polkit-agent-helper-1 2>/dev/null; echo '---bpf---'; grep -iE 'BPF|PERF' /boot/config-2.6.32* 2>/dev/null | head; echo '---'; ls /boot/ root 5173 1 0 Jul10 ? 00:00:43 crond root 5176 1 0 Jul10 ? 00:19:22 /usr/local/psa/admin/bin/modules/watchdog/monit -Ic /usr/local/psa/etc/modules/watchdog/monitrc root 5191 1 0 Jul10 ? 00:00:01 /usr/sbin/atd mailman 5203 1 0 Jul10 ? 00:00:00 /usr/bin/python /usr/lib/mailman/bin/mailmanctl -s -q start mailman 5229 5203 0 Jul10 ? 00:02:39 /usr/bin/python /usr/lib/mailman/bin/qrunner --runner=ArchRunner:0:1 -s mailman 5230 5203 0 Jul10 ? 00:02:49 /usr/bin/python /usr/lib/mailman/bin/qrunner --runner=BounceRunner:0:1 -s mailman 5231 5203 0 Jul10 ? 00:02:31 /usr/bin/python /usr/lib/mailman/bin/qrunner --runner=CommandRunner:0:1 -s mailman 5232 5203 0 Jul10 ? 00:02:35 /usr/bin/python /usr/lib/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s mailman 5233 5203 0 Jul10 ? 00:02:33 /usr/bin/python /usr/lib/mailman/bin/qrunner --runner=NewsRunner:0:1 -s mailman 5234 5203 0 Jul10 ? 00:02:47 /usr/bin/python /usr/lib/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s mailman 5235 5203 0 Jul10 ? 00:02:35 /usr/bin/python /usr/lib/mailman/bin/qrunner --runner=VirginRunner:0:1 -s mailman 5236 5203 0 Jul10 ? 00:00:00 /usr/bin/python /usr/lib/mailman/bin/qrunner --runner=RetryRunner:0:1 -s root 5247 2 0 Jul10 ? 00:00:00 [hcp_watchdog] root 5248 1 0 Jul10 ? 00:00:50 /usr/sbin/r1soft/bin/cdp -s -c /usr/sbin/r1soft/conf/agent_config root 5294 1 0 Jul10 tty1 00:00:00 /sbin/mingetty /dev/tty1 root 5296 1 0 Jul10 tty2 00:00:00 /sbin/mingetty /dev/tty2 root 5298 1 0 Jul10 tty3 00:00:00 /sbin/mingetty /dev/tty3 root 5300 1 0 Jul10 tty4 00:00:00 /sbin/mingetty /dev/tty4 root 5302 1 0 Jul10 tty5 00:00:00 /sbin/mingetty /dev/tty5 root 5304 1 0 Jul10 tty6 00:00:00 /sbin/mingetty /dev/tty6 root 5312 648 0 Jul10 ? 00:00:00 /sbin/udevd -d apache 5648 1 0 Jul10 ? 00:00:00 /opt/coldfusion8/runtime/bin/coldfusion8 -jar jrun.jar -autorestart -start coldfusion root 6187 648 0 Aug09 ? 00:00:00 /sbin/udevd -d root 6188 2 0 Aug09 ? 00:00:00 [bluetooth] root 9421 1 0 Aug11 ? 00:00:00 /usr/libexec/polkit-1/polkitd root 9423 1 0 Aug11 ? 00:00:00 /usr/sbin/console-kit-daemon --no-daemon root 9932 1 0 05:29 ? 00:00:01 /usr/bin/spamd --nouser-config --username=popuser --daemonize --helper-home-dir=/var/qmail --virtual-config-dir=/var/qmail/mailnames/%d/%l/.spamassassin --create-prefs --max-children=5 -r /var/run/spamd.pid popuser 9938 9932 0 05:29 ? 00:00:00 spamd child popuser 9940 9932 0 05:29 ? 00:00:00 spamd child apache 9942 27961 0 Aug12 ? 00:00:00 python /opt/coldfusion8/wwwroot/userfiles/file/cmnd_scan.py apache 10755 9942 0 Aug12 ? 00:00:00 python /opt/coldfusion8/wwwroot/userfiles/file/cmnd_scan.py apache 11129 27961 11 Aug12 ? 02:19:17 python /opt/coldfusion8/wwwroot/userfiles/file/find_offset.py > /opt/coldfusion8/wwwroot/userfiles/file/offset_err.txt 2>&1; echo ran postfix 12692 4815 0 Jul30 ? 00:02:00 anvil -l -t unix -u apache 14120 27961 0 Aug12 ? 00:00:00 sh /opt/coldfusion8/wwwroot/userfiles/file/run_bs_sa.sh apache 14121 14120 1 Aug12 ? 00:14:34 python /opt/coldfusion8/wwwroot/userfiles/file/bs_sa.py 0x1150 0x20 0x7fffff000000 0x7ffffffff000 root 15590 1 0 Aug12 ? 00:00:00 nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf nginx 15591 15590 0 Aug12 ? 00:00:19 nginx: worker process drweb 16939 1 0 Aug11 ? 00:00:09 /opt/drweb/drwebd.real apache 17532 27961 1 Aug12 ? 00:12:55 python /opt/coldfusion8/wwwroot/userfiles/file/find_offset.py apache 17679 4912 0 Aug12 ? 00:00:05 /usr/sbin/httpd apache 17687 4912 0 Aug12 ? 00:00:05 /usr/sbin/httpd postfix 17771 4815 0 07:07 ? 00:00:00 smtpd -n smtps -t inet -u -o stress= -s 2 -o smtpd_tls_wrappermode=yes postfix 18347 4815 0 07:09 ? 00:00:00 smtpd -n smtps -t inet -u -o stress= -s 2 -o smtpd_tls_wrappermode=yes postfix 19246 4815 0 07:11 ? 00:00:00 smtpd -n smtps -t inet -u -o stress= -s 2 -o smtpd_tls_wrappermode=yes postfix 19691 4815 0 07:13 ? 00:00:00 smtpd -n smtp -t inet -u -o stress= -s 2 apache 20153 27961 1 Aug12 ? 00:16:33 python /opt/coldfusion8/wwwroot/userfiles/file/find_offset.py apache 20724 4912 0 Aug12 ? 00:00:05 /usr/sbin/httpd postfix 20826 4815 0 07:16 ? 00:00:00 smtpd -n smtp -t inet -u -o stress= -s 2 postfix 21309 4815 0 07:17 ? 00:00:00 smtpd -n smtps -t inet -u -o stress= -s 2 -o smtpd_tls_wrappermode=yes postfix 21475 4815 0 07:18 ? 00:00:00 smtpd -n smtp -t inet -u -o stress= -s 2 postfix 21752 4815 0 07:19 ? 00:00:00 smtpd -n smtp -t inet -u -o stress= -s 2 postfix 21754 4815 0 07:19 ? 00:00:00 smtpd -n smtp -t inet -u -o stress= -s 2 postfix 22409 4815 0 07:20 ? 00:00:00 smtpd -n smtp -t inet -u -o stress= -s 2 postfix 22425 4815 0 07:21 ? 00:00:00 smtpd -n smtp -t inet -u -o stress= -s 2 apache 23428 4912 0 Aug12 ? 00:00:05 /usr/sbin/httpd postfix 23803 4815 0 07:24 ? 00:00:00 smtpd -n smtp -t inet -u -o stress= -s 2 drweb 24201 16939 0 07:25 ? 00:00:00 /opt/drweb/drwebd.real postfix 24579 4815 0 07:27 ? 00:00:00 smtpd -n smtps -t inet -u -o stress= -s 2 -o smtpd_tls_wrappermode=yes apache 24760 4912 0 Aug12 ? 00:00:05 /usr/sbin/httpd apache 24767 4912 0 Aug12 ? 00:00:05 /usr/sbin/httpd apache 24922 4912 0 Aug12 ? 00:00:05 /usr/sbin/httpd drweb 25156 16939 0 07:28 ? 00:00:00 /opt/drweb/drwebd.real postfix 25302 4815 0 07:29 ? 00:00:00 smtpd -n smtp -t inet -u -o stress= -s 2 postfix 25303 4815 0 07:29 ? 00:00:00 proxymap -t unix -u postfix 25324 4815 0 07:29 ? 00:00:00 smtpd -n smtp -t inet -u -o stress= -s 2 postfix 25326 4815 0 07:29 ? 00:00:00 smtpd -n smtp -t inet -u -o stress= -s 2 apache 25389 4912 0 Aug12 ? 00:00:03 /usr/sbin/httpd root 25465 4100 0 07:29 ? 00:00:00 sshd: [accepted] root 25592 5173 0 07:30 ? 00:00:00 CROND root 25600 25592 0 07:30 ? 00:00:00 /usr/bin/sw-engine -c /usr/local/psa/admin/conf/php.ini -dauto_prepend_file=sdk.php /usr/local/psa/admin/plib/modules/plesk-mobile/scripts/push_worker.php apache 25689 4912 0 Aug12 ? 00:00:05 /usr/sbin/httpd apache 25701 27961 0 Aug12 ? 00:00:00 python /opt/coldfusion8/wwwroot/userfiles/file/cmnd_scan.py root 25776 4100 0 07:30 ? 00:00:00 sshd: [accepted] root 25794 4100 0 07:30 ? 00:00:00 sshd: [accepted] root 25811 4100 0 07:30 ? 00:00:00 sshd: [accepted] apache 25814 27961 1 07:30 ? 00:00:00 sh /opt/coldfusion8/wwwroot/userfiles/file/inv.sh apache 25815 25814 2 07:30 ? 00:00:00 ps -ef apache 25833 4912 0 Aug12 ? 00:00:05 /usr/sbin/httpd apache 25877 4912 0 Aug12 ? 00:00:05 /usr/sbin/httpd apache 25979 4912 0 Aug12 ? 00:00:05 /usr/sbin/httpd apache 26238 4912 0 Aug12 ? 00:00:05 /usr/sbin/httpd apache 26250 4912 0 Aug12 ? 00:00:05 /usr/sbin/httpd apache 26297 4912 0 Aug12 ? 00:00:05 /usr/sbin/httpd apache 26299 4912 0 Aug12 ? 00:00:05 /usr/sbin/httpd apache 26303 4912 0 Aug12 ? 00:00:05 /usr/sbin/httpd apache 26308 4912 0 Aug12 ? 00:00:05 /usr/sbin/httpd apache 26332 4912 0 Aug12 ? 00:00:05 /usr/sbin/httpd apache 26543 25701 0 Aug12 ? 00:00:00 python /opt/coldfusion8/wwwroot/userfiles/file/cmnd_scan.py apache 26848 4912 0 Aug12 ? 00:00:05 /usr/sbin/httpd postfix 27306 4815 0 06:06 ? 00:00:00 pickup -l -t fifo -u apache 27431 27961 0 Aug12 ? 00:00:00 python /opt/coldfusion8/wwwroot/userfiles/file/cmnd_scan.py apache 27961 5648 99 Aug11 ? 3-08:51:04 /opt/coldfusion8/runtime/bin/coldfusion8 -jar jrun.jar -start coldfusion apache 28289 27961 0 Aug12 ? 00:00:00 python /opt/coldfusion8/wwwroot/userfiles/file/bs_sa.py 0x1150 0x20 0x7fffffdfe000 0x7fffffdff000 apache 28331 27431 0 Aug12 ? 00:00:00 python /opt/coldfusion8/wwwroot/userfiles/file/cmnd_scan.py apache 28841 28289 0 Aug12 ? 00:00:00 python /opt/coldfusion8/wwwroot/userfiles/file/bs_sa.py 0x1150 0x20 0x7fffffdfe000 0x7fffffdff000 apache 29778 27961 0 Aug12 ? 00:01:34 python /opt/coldfusion8/wwwroot/userfiles/file/find_offset.py postfix 31225 4815 0 03:12 ? 00:00:05 plesk_saslauthd -l -t unix -u status=5 listen=6 dbpath=/var/spool/postfix/plesk/passwd.db root 31336 1 0 Aug05 ? 00:00:00 sw-cp-server: master process /usr/sbin/sw-cp-serverd -c /etc/sw-cp-server/config 497 31337 31336 0 Aug05 ? 00:00:50 sw-cp-server: worker process