Rogue Processes

Gregory Nou gregorynou at altern.org
Sun Jan 15 13:27:13 PST 2006


Dev Tugnait wrote:
> I seem to notice these two processes running with top. 
> 
> Netstat hasn't been issued by me and cant be killed with the START
> state. Can someone enlighten me on these processes.
> 
> FreeBSD dracula.transylvania.net 6.0-RELEASE FreeBSD 6.0-RELEASE #4: Sun
> Dec  4 00:22:01 EST 2005
> root at dracula.transylvania.net:/usr/src/sys/i386/compile/BLEACH  i386
> 
> The box doesnt run ssh or telnet just postfix relaying to my external
> webhost. 
> 
> 
> 89290 dark          1  96    0     0K     0K START    0:06  0.00%
> awt_robot
> 
> 10208 dark          1  -8    0     0K     0K START    0:00  3.00%
> netstat
> 
> Thanks
> 

I would be tempted to say that awt_robot is the java thing.
http://java.sun.com/j2se/1.3/docs/api/java/awt/Robot.html
It's is a class to allow you to program a demo.
Do you have java installed on this machine ?


More information about the freebsd-security mailing list