On Tuesday 25 November 2008 01:18 pm, David Kaiser wrote: > Well, it is possible that some process was able to change it's > process info to read "/usr/bin/perl -w./check.cgi" when there was no > check.cgi file anywhere. Just a decoy trick from a bad process.
Perhaps ... My additional post with more information never made it to the list. Let's see if this one does. Maybe I'm ending up on blocklists used by this list <frown>... In the meantime I was rounding a per-minute cronjob to kill check.cgi each time it found it ... now I've turned that off and will see if any show up again so i can check as you suggested. Jeff -- Jeff Lasman, Nobaloney Internet Services P.O. Box 52200, Riverside, CA 92517 Our jplists address used on lists is for list email only voice: +1 951 643-5345, or see: "http://www.nobaloney.net/contactus.html";
