bug? or got hacked?

I have a cpanel server and got the strange email from the output of upcp. It should be impossible that all processes are rootkit and also I can see them via ps and pstree so I wonder if this is a cpanel's bug.

I need a few help to show me a way please. Thanks in advance.

-----------------------
Kill Proc Enabled
Rebuilding Process List...Done
Rebuilding Process List...Done
Hidden Pid detected! [pid 1]
hidden from ps: [yes]
binary location: [/sbin/init]

Rebuilding Process List...Done
Hidden Pid detected! [pid 1185]
hidden from ps: [yes]
binary location: [/sbin/syslogd]

Rebuilding Process List...Done
Hidden Pid detected! [pid 1190]
hidden from ps: [yes]
binary location: [/sbin/klogd]

Rebuilding Process List...Done
Hidden Pid detected! [pid 1336]
hidden from ps: [yes]
binary location: [/usr/sbin/sshd]

Rebuilding Process List...Done
Hidden Pid detected! [pid 1370]
hidden from ps: [yes]
binary location: [/usr/sbin/xinetd]

Rebuilding Process List...Done
Hidden Pid detected! [pid 1524]
hidden from ps: [yes]
binary location: [/usr/bin/perl]

Rebuilding Process List...Done
Hidden Pid detected! [pid 1587]
hidden from ps: [yes]
binary location: [/usr/sbin/named]

Rebuilding Process List...Done
Hidden Pid detected! [pid 1589]
hidden from ps: [yes]
binary location: [/usr/sbin/named]

Rebuilding Process List...Done
Hidden Pid detected! [pid 1590]
hidden from ps: [yes]
binary location: [/usr/sbin/named]

Rebuilding Process List...Done
Hidden Pid detected! [pid 1591]
hidden from ps: [yes]
binary location: [/usr/sbin/named]

Rebuilding Process List...Done
Hidden Pid detected! [pid 1592]
hidden from ps: [yes]
binary location: [/usr/sbin/named]

Rebuilding Process List...Done
Hidden Pid detected! [pid 1642]
hidden from ps: [yes]
binary location: [/bin/bash]

Rebuilding Process List...Done
Hidden Pid detected! [pid 1653]
hidden from ps: [yes]
binary location: [/usr/sbin/rndc]

Rebuilding Process List...Done
Hidden Pid detected! [pid 1654]
hidden from ps: [yes]
binary location: [/usr/sbin/rndc]

Rebuilding Process List...Done
Hidden Pid detected! [pid 1655]
hidden from ps: [yes]
binary location: [/usr/sbin/rndc]

Rebuilding Process List...Done
Hidden Pid detected! [pid 1656]
hidden from ps: [yes]
binary location: [/usr/sbin/rndc]

Rebuilding Process List...Done
Hidden Pid detected! [pid 1690]
hidden from ps: [yes]
binary location: [/usr/sbin/crond]

Rebuilding Process List...Done
Hidden Pid detected! [pid 2106]
hidden from ps: [yes]
binary location: [/usr/sbin/rhnsd]

Rebuilding Process List...Done
Hidden Pid detected! [pid 2136]
hidden from ps: [yes]
binary location: [/usr/sbin/portsentry]

Rebuilding Process List...Done
Hidden Pid detected! [pid 2291]
hidden from ps: [yes]
binary location: [/sbin/mingetty]

Rebuilding Process List...Done
Hidden Pid detected! [pid 2292]
hidden from ps: [yes]
binary location: [/sbin/mingetty]

Rebuilding Process List...Done
Hidden Pid detected! [pid 2293]
hidden from ps: [yes]
binary location: [/sbin/mingetty]

Rebuilding Process List...Done
Hidden Pid detected! [pid 2294]
hidden from ps: [yes]
binary location: [/sbin/mingetty]

Rebuilding Process List...Attempted to build process list more then 25 times! at bin/dcpumon.pl line 428.
Done
Hidden Pid detected! [pid 2295]
hidden from ps: [yes]
binary location: [/sbin/mingetty]

 

 

 

 

Top