Any of these are needed or torojan virus?
On linux RH9 server, I see this if do top command:
Code:
PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME CPU COMMAND
24665 root 12 0 1132 1132 824 R 0.5 0.1 0:01 0 top
1 root 13 6 508 508 456 S N 0.0 0.0 0:04 1 init
2 root 12 6 0 0 0 SWN 0.0 0.0 0:00 0 keventd
3 root 19 19 0 0 0 SWN 0.0 0.0 0:02 0 ksoftirqd_CPU0
4 root 18 19 0 0 0 SWN 0.0 0.0 0:00 1 ksoftirqd_CPU1
5 root 12 6 0 0 0 SWN 0.0 0.0 0:00 1 kswapd
6 root 12 6 0 0 0 SWN 0.0 0.0 0:00 0 bdflush
7 root 13 6 0 0 0 SWN 0.0 0.0 0:02 0 kupdated
8 root 13 6 0 0 0 SWN 0.0 0.0 0:02 0 kjournald
601 root 12 6 0 0 0 SWN 0.0 0.0 0:00 0 kjournald
602 root 13 6 0 0 0 SWN 0.0 0.0 0:00 1 kjournald
980 root 13 6 576 576 496 S N 0.0 0.0 0:00 1 syslogd
984 root 13 6 464 464 408 S N 0.0 0.0 0:00 0 klogd
993 root 11 4 1940 1940 1636 S N 0.0 0.1 12:33 1 httpd
1076 root 12 6 3476 3472 2216 S N 0.0 0.3 0:00 1 snmpd
1086 named 12 6 2864 2860 2144 S N 0.0 0.2 0:00 1 named
1100 root 11 4 1532 1532 1396 S N 0.0 0.1 0:00 1 sshd
1113 root 10 4 824 824 708 S N 0.0 0.0 0:00 0 xinetd
1130 root 13 6 2580 2580 1916 S N 0.0 0.2 0:01 1 sendmail
1138 smmsp 13 6 2312 2304 1772 S N 0.0 0.2 0:00 0 sendmail
1148 root 12 8 15352 14M 2372 S N 0.0 1.4 0:00 0 spamd
1166 root 13 6 608 608 536 S N 0.0 0.0 0:00 0 crond
1200 root 12 6 1168 1168 996 S N 0.0 0.1 0:00 1 mysqld_safe
1272 daemon 13 6 556 556 492 S N 0.0 0.0 0:00 0 atd
1288 mysql 13 6 30304 29M 2212 S N 0.0 2.9 1:04 1 mysqld
1297 root 13 8 4284 4280 1840 S N 0.0 0.4 0:00 0 miniserv.pl
1305 root 13 8 5016 5012 1976 S N 0.0 0.4 0:00 0 miniserv.pl
1308 root 12 8 420 420 368 S N 0.0 0.0 0:00 0 mingetty
1309 root 12 8 420 420 368 S N 0.0 0.0 0:00 0 mingetty
1310 root 12 8 420 420 368 S N 0.0 0.0 0:00 1 mingetty
1311 root 12 8 420 420 368 S N 0.0 0.0 0:00 1 mingetty
1312 root 12 8 420 420 368 S N 0.0 0.0 0:00 1 mingetty
1313 root 12 8 420 420 368 S N 0.0 0.0 0:00 0 mingetty
24625 root 9 0 1436 1436 1092 S 0.0 0.1 0:00 0 bash
Q:2. why two sendmail program running with two user, ie. root and smmsp ?
Q:3. How can I turn off/remove any of this application if they are not needed? or it is a torojan virus?
Thanks

