Suspicous process

Discuss the ConfigServer MailScanner Front-End script
1 post Page 1 of 1
keat63
Junior Member
Posts: 75
Joined: 17 Dec 2014, 14:50


Any ideas why Mailscanner has started throwing these warnings.
Only started in the last couple of days, maybe after updating WHM.

Executable:

/usr/local/cpanel/3rdparty/perl/528/bin/perl


Command Line (often faked in exploits):

MailScanner: waiting for messages


Network connections by the process (if any):

udp: 213.171.xxx.xx:56285 -> 5.9.124.53:24441


Files open by the process (if any):

/dev/null
/dev/null
/dev/null
/usr/mailscanner/usr/share/MailScanner/perl/MailScanner/CustomConfig.pm
/usr/mailscanner/usr/share/MailScanner/perl/MailScanner/ConfigDefs.pl
/usr/mailscanner/usr/share/MailScanner/perl/custom/GenericSpamScanner.pm
/var/spool/MailScanner/incoming/SpamAssassin.cache.db
1 post Page 1 of 1