HasWeb Family Forum: twilight zone with cron demon (virus? hacker?) - HasWeb Family Forum

Jump to content

Help

Page 1 of 1

You cannot start a new topic
You cannot reply to this topic

twilight zone with cron demon (virus? hacker?) Rate Topic:

#1 LoopyModule

Semi-New HasWebber

Group: Hasweb Family Members
Posts: 10
Joined: 17-March 04

Posted 03 March 2005 - 01:55 AM

This morning I received 14 e-mails from "Cron Demon" with the following subject (I replaced my account and site name, didn't know if that was neccessary):

Cron <myaccountname@jet3> wget -q -O /dev/null http://mysite.name/a...d_reminders.php

and in the body:

/bin/sh: /usr/bin/wget: Permission denied

I recognise the agenda thing, I've had that installed a long time ago, but deactivated it again, and erased the folder. :shock: The e-mails were sent twice every half our since 4:30. I'm a bit clueless about what is going on. Computer weirdness, virus, hacker?

Page 1 of 1

You cannot start a new topic
You cannot reply to this topic

#2 LoopyModule

Semi-New HasWebber

Group: Hasweb Family Members
Posts: 10
Joined: 17-March 04

Posted 03 March 2005 - 02:08 AM

and still it continues. just got 2 more, 8 o'clock sharp...

#3 LoopyModule

Semi-New HasWebber

Group: Hasweb Family Members
Posts: 10
Joined: 17-March 04

Posted 03 March 2005 - 05:11 AM

oh god. they just keep coming. I'm somewhere inbetween annoyed at this "spam", and feeling a bit anxious in a twilight zoney way (maybe it's stuck like that? will it go on for ever, and ever, and ever, and ever... ? what did I do to deserve such a curse?)

#4 Guest_Anonymous_*

Group: Unregistered Guests

Posted 03 March 2005 - 07:23 AM

Nevermind, I figured it out. Apparently I never actually removed webcalendar (just deleted the folder). I've properly removed it now, and will now within a few minutes if that did the trick. Still weird why I was getting attempts at a reminder. Haven't used the thing in over a year.

#5 LoopyModule

Semi-New HasWebber

Group: Hasweb Family Members
Posts: 10
Joined: 17-March 04

Posted 03 March 2005 - 08:03 AM

okay, now I get just one instead of two emails. goodness gracious me.

#6 LoopyModule

Semi-New HasWebber

Group: Hasweb Family Members
Posts: 10
Joined: 17-March 04

Posted 03 March 2005 - 08:04 AM

anyways, found my way to the Cron manager and deleted the tab. Hopefully nothing will explode.

#7 Aric

The Goto Guy

Group: Admin
Posts: 4,642
Joined: 30-April 03
Gender:Male
Location:New Jersey, USA
Interests:Underwater basket weaving

Posted 03 March 2005 - 02:07 PM

This isn't a virus or hacker, the cron was trying to execute something it didn't have access to, so the cron manager warns you when it runs into problems.

Removing the cronjob should stop the e-mails.

Regards,

Aric

Please report server issues to:
The Hasweb Helpdesk and Client Area

Now Shipping (covers v10 and earlier):
cPanel: A User's Guide
WebHost Manager Administration Guide