[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[cobalt-security] CROND
- Subject: [cobalt-security] CROND
 
- From: Skyhound Internet <tom@xxxxxxxxxxxxxxxxxxxx>
 
- Date: Tue, 26 Nov 2002 14:12:02 -0800
 
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
 
I have a process running on one of my Raq4's called CROND.  Not to be 
mistaken with crond.
root      4180  0.0  0.1  1156  536 ?        S    14:09   0:00 CROND
I am unaware of what this process is. The latest chkrootkit shows no hacks.
A reboot of the machine cleared it out but it came back again the next day.
Any ideas of what this might be?
Thanks
Tom
_______________________________________
Skyhound Internet
Long Beach CA