S UID PID PPID C PRI NI RSS SZ WCHAN STIME TTY TIME CMD S root 1 0 0 75 0 432 1206 - 04:29 ? 00:00:01 init [3] S root 2 1 0 -40 - 0 0 migrat 04:29 ? 00:00:00 [migration/0] S root 3 1 0 94 19 0 0 ksofti 04:29 ? 00:00:00 [ksoftirqd/0] S root 4 1 0 -40 - 0 0 watchd 04:29 ? 00:00:00 [watchdog/0] S root 5 1 0 -40 - 0 0 migrat 04:29 ? 00:00:00 [migration/1] S root 6 1 0 94 19 0 0 ksofti 04:29 ? 00:00:00 [ksoftirqd/1] S root 7 1 0 -40 - 0 0 watchd 04:29 ? 00:00:00 [watchdog/1] S root 8 1 0 70 -5 0 0 worker 04:29 ? 00:00:00 [events/0] S root 9 1 0 70 -5 0 0 worker 04:29 ? 00:00:00 [events/1] S root 10 1 0 80 -5 0 0 worker 04:29 ? 00:00:00 [khelper] S root 11 1 0 70 -5 0 0 worker 04:29 ? 00:00:00 [kthread] S root 47 11 0 70 -5 0 0 worker 04:29 ? 00:00:00 [kblockd/0] S root 48 11 0 70 -5 0 0 worker 04:29 ? 00:00:00 [kblockd/1] S root 49 11 0 77 -5 0 0 worker 04:29 ? 00:00:00 [kacpid] S root 129 11 0 70 -5 0 0 worker 04:29 ? 00:00:00 [ksuspend_usbd] S root 132 11 0 70 -5 0 0 hub_th 04:29 ? 00:00:00 [khubd] S root 134 11 0 70 -5 0 0 serio_ 04:29 ? 00:00:00 [kseriod] S root 173 11 1 70 -5 0 0 kswapd 04:29 ? 00:15:30 [kswapd0] S root 174 11 1 71 -5 0 0 kswapd 04:29 ? 00:14:31 [kswapd1] S root 175 11 0 78 -5 0 0 worker 04:29 ? 00:00:00 [aio/0] S root 176 11 0 77 -5 0 0 worker 04:29 ? 00:00:00 [aio/1] S root 309 11 0 71 -5 0 0 worker 04:29 ? 00:00:00 [kpsmoused] S root 333 11 0 74 -5 0 0 worker 04:29 ? 00:00:00 [ata/0] S root 334 11 0 74 -5 0 0 worker 04:29 ? 00:00:00 [ata/1] S root 335 11 0 74 -5 0 0 worker 04:29 ? 00:00:00 [ata_aux] S root 341 11 0 72 -5 0 0 scsi_e 04:29 ? 00:00:00 [scsi_eh_0] S root 342 11 0 70 -5 0 0 scsi_e 04:29 ? 00:00:00 [scsi_eh_1] S root 343 11 0 70 -5 0 0 scsi_e 04:29 ? 00:00:00 [scsi_eh_2] S root 344 11 0 70 -5 0 0 scsi_e 04:29 ? 00:00:00 [scsi_eh_3] S root 374 11 0 70 -5 0 0 kjourn 04:29 ? 00:00:21 [kjournald] S root 1297 1 0 75 -5 324 921 - 04:29 ? 00:00:00 udevd S root 1702 11 0 71 -5 0 0 kaudit 04:29 ? 00:00:00 [kauditd] S root 1827 11 0 71 -5 0 0 kjourn 04:29 ? 00:00:00 [kjournald] S root 1836 11 0 70 -5 0 0 kjourn 04:29 ? 00:00:00 [kjournald] S root 2648 1 0 76 0 484 924 - 04:29 ? 00:00:09 syslogd -m 0 S root 2652 1 0 75 0 348 653 syslog 04:29 ? 00:00:03 klogd -x S root 2662 1 0 78 0 280 656 - 04:29 ? 00:00:00 irqbalance S named 2677 1 0 85 0 1976 14557 rt_sig 04:29 ? 00:00:09 /usr/sbin/named -u named -c /etc/named.conf -u named -t /var/named/run-root S rpc 2714 1 0 82 0 408 1202 - 04:29 ? 00:00:00 portmap S root 2733 1 0 78 0 512 1469 - 04:29 ? 00:00:00 rpc.statd S root 2769 1 0 78 0 180 5248 - 04:29 ? 00:00:00 rpc.idmapd S root 2840 1 0 78 0 208 729 - 04:29 ? 00:00:00 /usr/sbin/smartd S root 2849 1 0 83 0 320 653 - 04:29 ? 00:00:00 /usr/sbin/acpid S root 2858 1 0 75 0 612 5495 - 04:29 ? 00:00:02 /usr/sbin/sshd S root 2871 1 0 75 0 700 2197 - 04:29 ? 00:00:00 xinetd -stayalive -pidfile /var/run/xinetd.pid S root 3004 1 0 75 0 652 4073 - 04:30 ? 00:00:00 /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=imapd -maxprocs=40 -maxperip=4 -pid=/var/run/imapd.pid -nodnslookup -noidentlookup 143 /usr/sbin/imaplogin /usr/lib/courier-imap/authlib/authpsa /usr/bin/imapd Maildir S root 3006 1 0 78 0 540 3537 pipe_w 04:30 ? 00:00:00 /usr/sbin/courierlogger imapd S root 3016 1 0 84 0 648 4073 - 04:30 ? 00:00:00 /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=imapd-ssl -maxprocs=40 -maxperip=4 -pid=/var/run/imapd-ssl.pid -nodnslookup -noidentlookup 993 /usr/bin/couriertls -server -tcpd /usr/sbin/imaplogin /usr/lib/courier-imap/authlib/authpsa /usr/bin/imapd Maildir S root 3018 1 0 84 0 336 3503 pipe_w 04:30 ? 00:00:00 /usr/sbin/courierlogger imapd-ssl S root 3026 1 0 75 0 652 4074 - 04:30 ? 00:00:00 /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=pop3d -maxprocs=40 -maxperip=4 -pid=/var/run/pop3d.pid -nodnslookup -noidentlookup 110 /usr/sbin/pop3login /usr/lib/courier-imap/authlib/authpsa /usr/bin/pop3d Maildir S root 3028 1 0 78 0 540 3537 pipe_w 04:30 ? 00:00:00 /usr/sbin/courierlogger pop3d S root 3037 1 0 84 0 648 4074 - 04:30 ? 00:00:00 /usr/lib/courier-imap/couriertcpd -address=0 -stderrlogger=/usr/sbin/courierlogger -stderrloggername=pop3d-ssl -maxprocs=40 -maxperip=4 -pid=/var/run/pop3d-ssl.pid -nodnslookup -noidentlookup 995 /usr/bin/couriertls -server -tcpd /usr/sbin/pop3login /usr/lib/courier-imap/authlib/authpsa /usr/bin/pop3d Maildir S root 3039 1 0 78 0 336 3503 pipe_w 04:30 ? 00:00:00 /usr/sbin/courierlogger pop3d-ssl S root 3049 1 0 75 0 224 1063 - 04:30 ? 00:00:00 gpm -m /dev/input/mice -t imps2 S qmails 3084 1 0 76 0 440 664 - 04:30 ? 00:00:08 qmail-send S qmaill 3086 3084 0 76 0 436 652 pipe_w 04:30 ? 00:00:01 splogger qmail S root 3087 3084 0 75 0 336 661 - 04:30 ? 00:00:01 qmail-lspawn ./Maildir/ S qmailr 3088 3084 0 75 0 356 661 - 04:30 ? 00:00:00 qmail-rspawn S qmailq 3089 3084 0 78 0 296 650 pipe_w 04:30 ? 00:00:00 qmail-clean S popuser 3238 1 0 75 0 1208 27859 - 04:30 ? 00:00:00 /usr/bin/spamd --username=popuser --daemonize --nouser-config --helper-home-dir=/var/qmail --max-children 5 --create-prefs --virtual-config-dir=/var/qmail/mailnames/%d/%l/.spamassassin --pidfile=/var/run/spamd/spamd_full.pid --socketpath=/tmp/spamd_full.sock S popuser 3256 3238 0 76 0 368 27859 - 04:30 ? 00:00:00 spamd child S popuser 3257 3238 0 77 0 360 27859 - 04:30 ? 00:00:00 spamd child S popuser 3258 3238 0 77 0 360 27859 - 04:30 ? 00:00:00 spamd child S popuser 3259 3238 0 78 0 360 27859 - 04:30 ? 00:00:00 spamd child S popuser 3260 3238 0 78 0 360 27859 - 04:30 ? 00:00:00 spamd child S root 3327 1 0 75 0 540 14275 - 04:30 ? 00:00:00 crond S root 3366 1 0 78 0 324 2248 - 04:30 ? 00:00:00 /usr/sbin/atd S dbus 3401 1 0 81 0 276 2430 - 04:30 ? 00:00:00 dbus-daemon-1 --system S root 3639 1 0 78 0 316 650 - 04:30 tty1 00:00:00 /sbin/mingetty tty1 S root 3640 1 0 78 0 316 650 - 04:30 tty2 00:00:00 /sbin/mingetty tty2 S root 3641 1 0 78 0 316 651 - 04:30 tty3 00:00:00 /sbin/mingetty tty3 S root 3642 1 0 78 0 316 651 - 04:30 tty4 00:00:00 /sbin/mingetty tty4 S root 3643 1 0 79 0 316 651 - 04:30 tty5 00:00:00 /sbin/mingetty tty5 S root 3644 1 0 80 0 316 650 - 04:30 tty6 00:00:00 /sbin/mingetty tty6 S root 3645 1 0 75 0 2928 20688 - 04:30 ? 00:00:00 /usr/local/psa/admin/bin/php /usr/local/psa/admin/bin/modules/watchdog/wdcollect -c /usr/local/psa/etc/modules/watchdog/wdcollect.inc.php S root 3646 1 0 76 0 1512 6835 stext 04:30 ? 00:00:23 /usr/local/psa/admin/bin/modules/watchdog/monit -Ic /usr/local/psa/etc/modules/watchdog/monitrc S root 17400 2858 0 75 0 1532 6177 - 18:35 ? 00:00:04 sshd: root@pts/0,pts/1 S root 17402 17400 0 75 0 1188 13515 wait 18:35 pts/0 00:00:00 -bash S root 18521 1 0 75 0 768 18489 rt_sig 19:01 ? 00:00:00 /usr/local/psa/admin/bin/httpsd S psaadm 18529 18521 0 75 0 2056 34576 - 19:01 ? 00:00:03 /usr/local/psa/admin/bin/httpsd S psaadm 18538 18521 0 75 0 2052 32715 semtim 19:01 ? 00:00:03 /usr/local/psa/admin/bin/httpsd S drweb 18539 1 0 75 0 132 4634 - 19:01 ? 00:00:02 /opt/drweb/drwebd S root 19345 17400 0 76 0 1196 13612 wait 19:16 pts/1 00:00:00 -bash S drweb 21751 18539 0 75 0 128 4634 - 20:18 ? 00:00:00 /opt/drweb/drwebd S drweb 21752 18539 0 75 0 132 4634 - 20:18 ? 00:00:00 /opt/drweb/drwebd S drweb 21753 18539 0 75 0 132 4634 - 20:18 ? 00:00:00 /opt/drweb/drwebd S drweb 21754 18539 0 75 0 132 4634 - 20:18 ? 00:00:00 /opt/drweb/drwebd S root 21937 1 0 83 0 888 13479 wait 20:21 pts/1 00:00:00 /bin/sh /usr/bin/mysqld_safe --defaults-file=/etc/my.cnf --pid-file=/var/run/mysqld/mysqld.pid S mysql 21971 21937 0 75 0 41132 112155 stext 20:21 pts/1 00:01:03 /usr/libexec/mysqld --defaults-file=/etc/my.cnf --basedir=/usr --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-locking --socket=/var/lib/mysql/mysql.sock S root 23783 11 0 75 0 0 0 pdflus 22:37 ? 00:00:00 [pdflush] S root 23788 11 0 75 0 0 0 pdflus 22:37 ? 00:00:00 [pdflush] S root 23798 1 0 78 0 6968 40229 - 22:37 ? 00:00:01 /usr/sbin/httpd S apache 23801 23798 0 79 0 2648 39970 - 22:37 ? 00:00:00 /usr/sbin/httpd S apache 23803 23798 0 75 0 5740 42631 flock_ 22:37 ? 00:00:00 /usr/sbin/httpd crap ton of httpd