heya, i know i should probably search the forums to find an answer, but i am a very busy person, so even if you just provide links for me it would be useful. basically i have the problem in that someone is running processes on my server as nobody (i believe they are eggdrop - but they are run under a different guise (./bin/apache/http A or something)) and basically i need to find out who is running them and where from - its not that they are logging in as root since i know that no-one apart from me has been logging in. The processes are very processor intensive and they seem to always come back online even when i kill them (although they dont come back instantly) - there is usually about 5 or 6 of them.
my server is running cpanel/WHM and no-one apart from me has shell access.
If someone can help me trace these processes / stop them from running it would be great
