Re: [cobalt-security] CROND

["John 'JAYTEE' Tompkins" <jaytee@xxxxxxxxx>]

Tom,
On Our RAQ3, CROND appears as a process when monitor.pl executes on the 
quarter hour
All ways has...

JAYTEE

On Wednesday, November 27, 2002, at 09:12  AM, Skyhound Internet wrote:

> I have a process running on one of my Raq4's called CROND.  Not to be 
> mistaken with crond.
>
> root      4180  0.0  0.1  1156  536 ?        S    14:09   0:00 CROND
>
> I am unaware of what this process is. The latest chkrootkit shows no 
> hacks.
>
> A reboot of the machine cleared it out but it came back again the next 
> day.
>
> Any ideas of what this might be?
>
> Thanks
>
> Tom
>
> _______________________________________
> Skyhound Internet
> Long Beach CA
>
> _______________________________________________
> cobalt-security mailing list
> cobalt-security@xxxxxxxxxxxxxxx
> http://list.cobalt.com/mailman/listinfo/cobalt-security