Any of these are needed or torojan virus?
On linux RH9 server, I see this if do top command:
Code:
PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME CPU COMMAND 24665 root 12 0 1132 1132 824 R 0.5 0.1 0:01 0 top 1 root 13 6 508 508 456 S N 0.0 0.0 0:04 1 init 2 root 12 6 0 0 0 SWN 0.0 0.0 0:00 0 keventd 3 root 19 19 0 0 0 SWN 0.0 0.0 0:02 0 ksoftirqd_CPU0 4 root 18 19 0 0 0 SWN 0.0 0.0 0:00 1 ksoftirqd_CPU1 5 root 12 6 0 0 0 SWN 0.0 0.0 0:00 1 kswapd 6 root 12 6 0 0 0 SWN 0.0 0.0 0:00 0 bdflush 7 root 13 6 0 0 0 SWN 0.0 0.0 0:02 0 kupdated 8 root 13 6 0 0 0 SWN 0.0 0.0 0:02 0 kjournald 601 root 12 6 0 0 0 SWN 0.0 0.0 0:00 0 kjournald 602 root 13 6 0 0 0 SWN 0.0 0.0 0:00 1 kjournald 980 root 13 6 576 576 496 S N 0.0 0.0 0:00 1 syslogd 984 root 13 6 464 464 408 S N 0.0 0.0 0:00 0 klogd 993 root 11 4 1940 1940 1636 S N 0.0 0.1 12:33 1 httpd 1076 root 12 6 3476 3472 2216 S N 0.0 0.3 0:00 1 snmpd 1086 named 12 6 2864 2860 2144 S N 0.0 0.2 0:00 1 named 1100 root 11 4 1532 1532 1396 S N 0.0 0.1 0:00 1 sshd 1113 root 10 4 824 824 708 S N 0.0 0.0 0:00 0 xinetd 1130 root 13 6 2580 2580 1916 S N 0.0 0.2 0:01 1 sendmail 1138 smmsp 13 6 2312 2304 1772 S N 0.0 0.2 0:00 0 sendmail 1148 root 12 8 15352 14M 2372 S N 0.0 1.4 0:00 0 spamd 1166 root 13 6 608 608 536 S N 0.0 0.0 0:00 0 crond 1200 root 12 6 1168 1168 996 S N 0.0 0.1 0:00 1 mysqld_safe 1272 daemon 13 6 556 556 492 S N 0.0 0.0 0:00 0 atd 1288 mysql 13 6 30304 29M 2212 S N 0.0 2.9 1:04 1 mysqld 1297 root 13 8 4284 4280 1840 S N 0.0 0.4 0:00 0 miniserv.pl 1305 root 13 8 5016 5012 1976 S N 0.0 0.4 0:00 0 miniserv.pl 1308 root 12 8 420 420 368 S N 0.0 0.0 0:00 0 mingetty 1309 root 12 8 420 420 368 S N 0.0 0.0 0:00 0 mingetty 1310 root 12 8 420 420 368 S N 0.0 0.0 0:00 1 mingetty 1311 root 12 8 420 420 368 S N 0.0 0.0 0:00 1 mingetty 1312 root 12 8 420 420 368 S N 0.0 0.0 0:00 1 mingetty 1313 root 12 8 420 420 368 S N 0.0 0.0 0:00 0 mingetty 24625 root 9 0 1436 1436 1092 S 0.0 0.1 0:00 0 bash
Q:2. why two sendmail program running with two user, ie. root and smmsp ?
Q:3. How can I turn off/remove any of this application if they are not needed? or it is a torojan virus?
Thanks