ایمیل از سرور با موضوع lfd on server.******.net: Suspicious process running under user username

اینا یعنی چی؟

Executable:

/usr/bin/php


Command Line (often faked in exploits):

/usr/bin/php /home/*******/public_html/forum/vbseo.php


Network connections by the process (if any):

tcp: ***.***.***.***:56996 -> 74.125.53.95:80


Files open by the process (if any):



Memory maps by the process (if any):

00110000-0018d000 r-xp 00000000 fd:00 14198266 /usr/lib/libfreetype.so.6.3.10
0018d000-00190000 rwxp 0007d000 fd:00 14198266 /usr/lib/libfreetype.so.6.3.10
00190000-001a7000 r-xp 00000000 fd:00 8716476 /lib/libaudit.so.0.0.0
001a7000-001a9000 rwxp 00016000 fd:00 8716476 /lib/libaudit.so.0.0.0
001ae000-001be000 r-xp 00000000 fd:00 8717455 /lib/libresolv-2.5.so
001be000-001bf000 r-xp 0000f000 fd:00 8717455 /lib/libresolv-2.5.so
001bf000-001c0000 rwxp 00010000 fd:00 8717455 /lib/libresolv-2.5.so
001c0000-001c2000 rwxp 001c0000 00:00 0
001c2000-001ca000 r-xp 00000000 fd:00 14197485 /usr/lib/libkrb5support.so.0.1
001ca000-001cb000 rwxp 00007000 fd:00 14197485 /usr/lib/libkrb5support.so.0.1
001cb000-001cd000 r-xp 00000000 fd:00 8717454 /lib/libkeyutils-1.2.so
001cd000-001ce000 rwxp 00001000 fd:00 8717454 /lib/libkeyutils-1.2.so
001d0000-002fa000 r-xp 00000000 fd:00 8717459 /lib/libcrypto.so.0.9.8e
002fa000-0030d000 rwxp 00129000 fd:00 8717459 /lib/libcrypto.so.0.9.8e
0030d000-00311000 rwxp 0030d000 00:00 0
00313000-00315000 r-xp 00000000 fd:00 8717458 /lib/libcom_err.so.2.1
00315000-00316000 rwxp 00001000 fd:00 8717458 /lib/libcom_err.so.2.1
00316000-00346000 r-xp 00000000 fd:00 14200870 /usr/lib/libidn.so.11.5.19
00346000-00347000 rwxp 0002f000 fd:00 14200870 /usr/lib/libidn.so.11.5.19
00347000-00351000 r-xp 00000000 fd:00 8716327 /lib/libnss_files-2.5.so
00351000-00352000 r-xp 00009000 fd:00 8716327 /lib/libnss_files-2.5.so
00352000-00353000 rwxp 0000a000 fd:00 8716327 /lib/libnss_files-2.5.so
00354000-0036f000 r-xp 00000000 fd:00 8717437 /lib/ld-2.5.so
0036f000-00370000 r-xp 0001a000 fd:00 8717437 /lib/ld-2.5.so
00370000-00371000 rwxp 0001b000 fd:00 8717437 /lib/ld-2.5.so
00373000-00375000 r-xp 00000000 fd:00 14197331 /usr/lib/libXau.so.6.0.0
00375000-00376000 rwxp 00001000 fd:00 14197331 /usr/lib/libXau.so.6.0.0
00376000-003b1000 r-xp 00000000 fd:00 8717456 /lib/libsepol.so.1
003b1000-003b2000 rwxp 0003b000 fd:00 8717456 /lib/libsepol.so.1
003b2000-003bc000 rwxp 003b2000 00:00 0
003bc000-003db000 r-xp 00000000 fd:00 15109053 /usr/local/lib/php/extensions/no-debug-non-zts-20060613/suhosin.so
003db000-003df000 rwxp 0001f000 fd:00 15109053 /usr/local/lib/php/extensions/no-debug-non-zts-20060613/suhosin.so
003df000-003e2000 rwxp 003df000 00:00 0
003e2000-003f6000 r-xp 00000000 fd:00 15107702 /usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo.so
003f6000-003f8000 rwxp 00014000 fd:00 15107702 /usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo.so
003f8000-00409000 r-xp 00000000 fd:00 15109010 /usr/local/lib/php/extensions/no-debug-non-zts-20060613/ixed.5.2.lin
00409000-0040a000 rwxp 00011000 fd:00 15109010 /usr/local/lib/php/extensions/no-debug-non-zts-20060613/ixed.5.2.lin
0040a000-0040e000 r-xp 00000000 fd:00 8716325 /lib/libnss_dns-2.5.so
0040e000-0040f000 r-xp 00003000 fd:00 8716325 /lib/libnss_dns-2.5.so
0040f000-00410000 rwxp 00004000 fd:00 8716325 /lib/libnss_dns-2.5.so
00445000-00446000 r-xp 00445000 00:00 0 [vdso]
00446000-004aa000 r-xp 00000000 fd:00 15109059 /usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_sqlite.so
004aa000-004ab000 rwxp 00063000 fd:00 15109059 /usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_sqlite.so
004d3000-004fa000 r-xp 00000000 fd:00 8717445 /lib/libm-2.5.so
004fa000-004fb000 r-xp 00026000 fd:00 8717445 /lib/libm-2.5.so
004fb000-004fc000 rwxp 00027000 fd:00 8717445 /lib/libm-2.5.so
004fe000-00501000 r-xp 00000000 fd:00 8717439 /lib/libdl-2.5.so
00501000-00502000 r-xp 00002000 fd:00 8717439 /lib/libdl-2.5.so
00502000-00503000 rwxp 00003000 fd:00 8717439 /lib/libdl-2.5.so
00505000-0051a000 r-xp 00000000 fd:00 8717440 /lib/libpthread-2.5.so
0051a000-0051b000 r-xp 00015000 fd:00 8717440 /lib/libpthread-2.5.so
0051b000-0051c000 rwxp 00016000 fd:00 8717440 /lib/libpthread-2.5.so
0051c000-0051e000 rwxp 0051c000 00:00 0
00520000-00532000 r-xp 00000000 fd:00 8717446 /lib/libz.so.1.2.3
00532000-00533000 rwxp 00011000 fd:00 8717446 /lib/libz.so.1.2.3
00535000-0053c000 r-xp 00000000 fd:00 8717441 /lib/librt-2.5.so
0053c000-0053d000 r-xp 00007000 fd:00 8717441 /lib/librt-2.5.so
0053d000-0053e000 rwxp 00008000 fd:00 8717441 /lib/librt-2.5.so
00540000-00715000 r-xp 00000000 fd:00 14197713 /usr/lib/libmysqlclient.so.16.0.0
00715000-0075e000 rwxp 001d4000 fd:00 14197713 /usr/lib/libmysqlclient.so.16.0.0
0075e000-0075f000 rwxp 0075e000 00:00 0
0075f000-007b4000 r-xp 00000000 fd:00 15109060 /usr/local/lib/php/extensions/no-debug-non-zts-20060613/sqlite.so
007b4000-007b6000 rwxp 00055000 fd:00 15109060 /usr/local/lib/php/extensions/no-debug-non-zts-20060613/sqlite.so
0081b000-00840000 r-xp 00000000 fd:00 14198271 /usr/lib/libpng12.so.0.10.0
00840000-00841000 rwxp 00024000 fd:00 14198271 /usr/lib/libpng12.so.0.10.0
00843000-00848000 r-xp 00000000 fd:00 14197513 /usr/lib/libXdmcp.so.6.0.0
00848000-00849000 rwxp 00004000 fd:00 14197513 /usr/lib/libXdmcp.so.6.0.0
0088f000-0089f000 r-xp 00000000 fd:00 14197590 /usr/lib/libXpm.so.4.11.0
0089f000-008a0000 rwxp 00010000 fd:00 14197590 /usr/lib/libXpm.so.4.11.0
008a2000-009a1000 r-xp 00000000 fd:00 14197514 /usr/lib/libX11.so.6.2.0
009a1000-009a5000 rwxp 000ff000 fd:00 14197514 /usr/lib/libX11.so.6.2.0
009a7000-009c8000 r-xp 00000000 fd:00 14197611 /usr/lib/libjpeg.so.62.0.0
009c8000-009c9000 rwxp 00020000 fd:00 14197611 /usr/lib/libjpeg.so.62.0.0
009c9000-00a83000 r-xp 00000000 fd:00 14648157 /usr/local/IonCube/ioncube_loader_lin_5.2.so
00a83000-00a88000 rwxp 000b9000 fd:00 14648157 /usr/local/IonCube/ioncube_loader_lin_5.2.so
00a88000-00a89000 rwxp 00a88000 00:00 0
00a8b000-00a91000 r-xp 00000000 fd:00 15109058 /usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_mysql.so
00a91000-00a92000 rwxp 00005000 fd:00 15109058 /usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_mysql.so
00a95000-00ae1000 r-xp 00000000 fd:00 10911881 /opt/curlssl/lib/libcurl.so.4.2.0
00ae1000-00ae3000 rwxp 0004b000 fd:00 10911881 /opt/curlssl/lib/libcurl.so.4.2.0
00b7f000-00b83000 r-xp 00000000 fd:00 8716291 /lib/libsafe.so.2.0.16
00b83000-00b84000 rwxp 00003000 fd:00 8716291 /lib/libsafe.so.2.0.16
00b84000-00c9d000 r-xp 00000000 fd:00 10912094 /opt/xml2/lib/libxml2.so.2.7.8
00c9d000-00ca2000 rwxp 00119000 fd:00 10912094 /opt/xml2/lib/libxml2.so.2.7.8
00ca2000-00ca3000 rwxp 00ca2000 00:00 0
00dc2000-00dd8000 r-xp 00000000 fd:00 8717457 /lib/libselinux.so.1
00dd8000-00dda000 rwxp 00015000 fd:00 8717457 /lib/libselinux.so.1
00ddc000-00df1000 r-xp 00000000 fd:00 8717453 /lib/libnsl-2.5.so
00df1000-00df2000 r-xp 00014000 fd:00 8717453 /lib/libnsl-2.5.so
00df2000-00df3000 rwxp 00015000 fd:00 8717453 /lib/libnsl-2.5.so
00df3000-00df5000 rwxp 00df3000 00:00 0
00df5000-00f48000 r-xp 00000000 fd:00 8717438 /lib/libc-2.5.so
00f48000-00f4a000 r-xp 00153000 fd:00 8717438 /lib/libc-2.5.so
00f4a000-00f4b000 rwxp 00155000 fd:00 8717438 /lib/libc-2.5.so
00f4b000-00f4e000 rwxp 00f4b000 00:00 0
00f5f000-00f9a000 r-xp 00000000 fd:00 10911748 /opt/pcre/lib/libpcre.so.0.0.1
00f9a000-00f9b000 rwxp 0003a000 fd:00 10911748 /opt/pcre/lib/libpcre.so.0.0.1
00f9b000-010e6000 r-xp 00000000 fd:00 14648154 /usr/local/Zend/lib/Optimizer-3.3.9/php-5.2.x/ZendOptimizer.so
010e6000-010f7000 rwxp 0014b000 fd:00 14648154 /usr/local/Zend/lib/Optimizer-3.3.9/php-5.2.x/ZendOptimizer.so
010f7000-010fc000 rwxp 010f7000 00:00 0
04537000-0455d000 r-xp 00000000 fd:00 14200338 /usr/lib/libk5crypto.so.3.1
0455d000-0455e000 rwxp 00025000 fd:00 14200338 /usr/lib/libk5crypto.so.3.1
04560000-045f4000 r-xp 00000000 fd:00 14200339 /usr/lib/libkrb5.so.3.3
045f4000-045f7000 rwxp 00093000 fd:00 14200339 /usr/lib/libkrb5.so.3.3
045f9000-04626000 r-xp 00000000 fd:00 14200340 /usr/lib/libgssapi_krb5.so.2.2
04626000-04627000 rwxp 0002d000 fd:00 14200340 /usr/lib/libgssapi_krb5.so.2.2
04649000-0468d000 r-xp 00000000 fd:00 8717460 /lib/libssl.so.0.9.8e
0468d000-04691000 rwxp 00043000 fd:00 8717460 /lib/libssl.so.0.9.8e
046ed000-046f7000 r-xp 00000000 fd:00 8717466 /lib/libpam.so.0.81.5
046f7000-046f8000 rwxp 0000a000 fd:00 8717466 /lib/libpam.so.0.81.5
047ce000-047d9000 r-xp 00000000 fd:00 8717448 /lib/libgcc_s-4.1.2-20080825.so.1
047d9000-047da000 rwxp 0000a000 fd:00 8717448 /lib/libgcc_s-4.1.2-20080825.so.1
04846000-0484f000 r-xp 00000000 fd:00 8717450 /lib/libcrypt-2.5.so
0484f000-04850000 r-xp 00008000 fd:00 8717450 /lib/libcrypt-2.5.so
04850000-04851000 rwxp 00009000 fd:00 8717450 /lib/libcrypt-2.5.so
04851000-04878000 rwxp 04851000 00:00 0
049b1000-04a91000 r-xp 00000000 fd:00 14199741 /usr/lib/libstdc++.so.6.0.8
04a91000-04a95000 r-xp 000df000 fd:00 14199741 /usr/lib/libstdc++.so.6.0.8
04a95000-04a96000 rwxp 000e3000 fd:00 14199741 /usr/lib/libstdc++.so.6.0.8
04a96000-04a9c000 rwxp 04a96000 00:00 0
08048000-08487000 r-xp 00000000 fd:00 14197332 /usr/bin/php
08487000-084b1000 rw-p 0043f000 fd:00 14197332 /usr/bin/php
084b1000-084bb000 rw-p 084b1000 00:00 0
08658000-096a7000 rw-p 08658000 00:00 0 [heap]
b7ac3000-b7be9000 rw-p b7ac3000 00:00 0
b7be9000-b7d2a000 rw-p b7d2a000 00:00 0
b7dab000-b7eec000 rw-p b7eec000 00:00 0
b7eec000-b7f76000 rw-p b7eec000 00:00 0
b7f82000-b7f83000 rw-p b7f82000 00:00 0
bfd58000-bfd73000 rwxp bffe2000 00:00 0 [stack]
bfd73000-bfd74000 rw-p bfffe000 00:00 0

ممنون میشم یکمی راهنمایی کنید

نقل قول:

---

Command Line (often faked in exploits):

/usr/bin/php /home/*******/public_html/forum/vbseo.php

---

به این خط توجه کنید . در سایتی صفحه php به نام vbseo.php وجود داره که یک نوع exploits l محسوب میشه شما این فایل رو برای تست پاک کنید به احتمال 99% مشکل شما برطرف خواهد شد .

اما اگر بخواهید از دست این ایمیل ها کلا در برید یا یک ایمیلی بدید به csf که قابل استفاده نیست و به اون بفرسته . البته معقولترین راه غیرفعال کردن lfd هست.

اما این ایمیل ها برای یک مدیر هاستینگ میتونه کمک زیادی کنه به شخصه برای ما اینطور بوده ازشون استفاده میکنیم از ریپورت هایی که میده.

خب این دقیقا یعنی چی؟ منظورش چیه؟

با پاک کردن این فایل سایت کاربر دیگه بالا نمیاد چون این فایل مربوط میشه به سیستم vbseo

یا باید پاک شود یا اینکه باید کلا این گونه اخطار ها رو بی نوجه باشید. این فایل فکر کنم ماله انجمن ساز vb هست نسخه سئو شده اش. شما یک بار تست کنید ببینید چی میشه .

دقیقا منظورش اینه

نقل قول:

---

network connections by the process (if any):

Tcp: ***.***.***.***:56996 -> 74.125.53.95:80


files open by the process (if any):



Memory maps by the process (if any):

00110000-0018d000 r-xp 00000000 fd:00 14198266 /usr/lib/libfreetype.so.6.3.10
0018d000-00190000 rwxp 0007d000 fd:00 14198266 /usr/lib/libfreetype.so.6.3.10
00190000-001a7000 r-xp 00000000 fd:00 8716476 /lib/libaudit.so.0.0.0
001a7000-001a9000 rwxp 00016000 fd:00 8716476 /lib/libaudit.so.0.0.0
001ae000-001be000 r-xp 00000000 fd:00 8717455 /lib/libresolv-2.5.so
001be000-001bf000 r-xp 0000f000 fd:00 8717455 /lib/libresolv-2.5.so
001bf000-001c0000 rwxp 00010000 fd:00 8717455 /lib/libresolv-2.5.so
001c0000-001c2000 rwxp 001c0000 00:00 0
001c2000-001ca000 r-xp 00000000 fd:00 14197485 /usr/lib/libkrb5support.so.0.1
001ca000-001cb000 rwxp 00007000 fd:00 14197485 /usr/lib/libkrb5support.so.0.1
001cb000-001cd000 r-xp 00000000 fd:00 8717454 /lib/libkeyutils-1.2.so
001cd000-001ce000 rwxp 00001000 fd:00 8717454 /lib/libkeyutils-1.2.so
001d0000-002fa000 r-xp 00000000 fd:00 8717459 /lib/libcrypto.so.0.9.8e
002fa000-0030d000 rwxp 00129000 fd:00 8717459 /lib/libcrypto.so.0.9.8e
0030d000-00311000 rwxp 0030d000 00:00 0
00313000-00315000 r-xp 00000000 fd:00 8717458 /lib/libcom_err.so.2.1
00315000-00316000 rwxp 00001000 fd:00 8717458 /lib/libcom_err.so.2.1
00316000-00346000 r-xp 00000000 fd:00 14200870 /usr/lib/libidn.so.11.5.19
00346000-00347000 rwxp 0002f000 fd:00 14200870 /usr/lib/libidn.so.11.5.19
00347000-00351000 r-xp 00000000 fd:00 8716327 /lib/libnss_files-2.5.so
00351000-00352000 r-xp 00009000 fd:00 8716327 /lib/libnss_files-2.5.so
00352000-00353000 rwxp 0000a000 fd:00 8716327 /lib/libnss_files-2.5.so
00354000-0036f000 r-xp 00000000 fd:00 8717437 /lib/ld-2.5.so
0036f000-00370000 r-xp 0001a000 fd:00 8717437 /lib/ld-2.5.so
00370000-00371000 rwxp 0001b000 fd:00 8717437 /lib/ld-2.5.so
00373000-00375000 r-xp 00000000 fd:00 14197331 /usr/lib/libxau.so.6.0.0
00375000-00376000 rwxp 00001000 fd:00 14197331 /usr/lib/libxau.so.6.0.0
00376000-003b1000 r-xp 00000000 fd:00 8717456 /lib/libsepol.so.1
003b1000-003b2000 rwxp 0003b000 fd:00 8717456 /lib/libsepol.so.1
003b2000-003bc000 rwxp 003b2000 00:00 0
003bc000-003db000 r-xp 00000000 fd:00 15109053 /usr/local/lib/php/extensions/no-debug-non-zts-20060613/suhosin.so
003db000-003df000 rwxp 0001f000 fd:00 15109053 /usr/local/lib/php/extensions/no-debug-non-zts-20060613/suhosin.so
003df000-003e2000 rwxp 003df000 00:00 0
003e2000-003f6000 r-xp 00000000 fd:00 15107702 /usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo.so
003f6000-003f8000 rwxp 00014000 fd:00 15107702 /usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo.so
003f8000-00409000 r-xp 00000000 fd:00 15109010 /usr/local/lib/php/extensions/no-debug-non-zts-20060613/ixed.5.2.lin
00409000-0040a000 rwxp 00011000 fd:00 15109010 /usr/local/lib/php/extensions/no-debug-non-zts-20060613/ixed.5.2.lin
0040a000-0040e000 r-xp 00000000 fd:00 8716325 /lib/libnss_dns-2.5.so
0040e000-0040f000 r-xp 00003000 fd:00 8716325 /lib/libnss_dns-2.5.so
0040f000-00410000 rwxp 00004000 fd:00 8716325 /lib/libnss_dns-2.5.so
00445000-00446000 r-xp 00445000 00:00 0 [vdso]
00446000-004aa000 r-xp 00000000 fd:00 15109059 /usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_sqlite.so
004aa000-004ab000 rwxp 00063000 fd:00 15109059 /usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_sqlite.so
004d3000-004fa000 r-xp 00000000 fd:00 8717445 /lib/libm-2.5.so
004fa000-004fb000 r-xp 00026000 fd:00 8717445 /lib/libm-2.5.so
004fb000-004fc000 rwxp 00027000 fd:00 8717445 /lib/libm-2.5.so
004fe000-00501000 r-xp 00000000 fd:00 8717439 /lib/libdl-2.5.so
00501000-00502000 r-xp 00002000 fd:00 8717439 /lib/libdl-2.5.so
00502000-00503000 rwxp 00003000 fd:00 8717439 /lib/libdl-2.5.so
00505000-0051a000 r-xp 00000000 fd:00 8717440 /lib/libpthread-2.5.so
0051a000-0051b000 r-xp 00015000 fd:00 8717440 /lib/libpthread-2.5.so
0051b000-0051c000 rwxp 00016000 fd:00 8717440 /lib/libpthread-2.5.so
0051c000-0051e000 rwxp 0051c000 00:00 0
00520000-00532000 r-xp 00000000 fd:00 8717446 /lib/libz.so.1.2.3
00532000-00533000 rwxp 00011000 fd:00 8717446 /lib/libz.so.1.2.3
00535000-0053c000 r-xp 00000000 fd:00 8717441 /lib/librt-2.5.so
0053c000-0053d000 r-xp 00007000 fd:00 8717441 /lib/librt-2.5.so
0053d000-0053e000 rwxp 00008000 fd:00 8717441 /lib/librt-2.5.so
00540000-00715000 r-xp 00000000 fd:00 14197713 /usr/lib/libmysqlclient.so.16.0.0
00715000-0075e000 rwxp 001d4000 fd:00 14197713 /usr/lib/libmysqlclient.so.16.0.0
0075e000-0075f000 rwxp 0075e000 00:00 0
0075f000-007b4000 r-xp 00000000 fd:00 15109060 /usr/local/lib/php/extensions/no-debug-non-zts-20060613/sqlite.so
007b4000-007b6000 rwxp 00055000 fd:00 15109060 /usr/local/lib/php/extensions/no-debug-non-zts-20060613/sqlite.so
0081b000-00840000 r-xp 00000000 fd:00 14198271 /usr/lib/libpng12.so.0.10.0
00840000-00841000 rwxp 00024000 fd:00 14198271 /usr/lib/libpng12.so.0.10.0
00843000-00848000 r-xp 00000000 fd:00 14197513 /usr/lib/libxdmcp.so.6.0.0
00848000-00849000 rwxp 00004000 fd:00 14197513 /usr/lib/libxdmcp.so.6.0.0
0088f000-0089f000 r-xp 00000000 fd:00 14197590 /usr/lib/libxpm.so.4.11.0
0089f000-008a0000 rwxp 00010000 fd:00 14197590 /usr/lib/libxpm.so.4.11.0
008a2000-009a1000 r-xp 00000000 fd:00 14197514 /usr/lib/libx11.so.6.2.0
009a1000-009a5000 rwxp 000ff000 fd:00 14197514 /usr/lib/libx11.so.6.2.0
009a7000-009c8000 r-xp 00000000 fd:00 14197611 /usr/lib/libjpeg.so.62.0.0
009c8000-009c9000 rwxp 00020000 fd:00 14197611 /usr/lib/libjpeg.so.62.0.0
009c9000-00a83000 r-xp 00000000 fd:00 14648157 /usr/local/ioncube/ioncube_loader_lin_5.2.so
00a83000-00a88000 rwxp 000b9000 fd:00 14648157 /usr/local/ioncube/ioncube_loader_lin_5.2.so
00a88000-00a89000 rwxp 00a88000 00:00 0
00a8b000-00a91000 r-xp 00000000 fd:00 15109058 /usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_mysql.so
00a91000-00a92000 rwxp 00005000 fd:00 15109058 /usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_mysql.so
00a95000-00ae1000 r-xp 00000000 fd:00 10911881 /opt/curlssl/lib/libcurl.so.4.2.0
00ae1000-00ae3000 rwxp 0004b000 fd:00 10911881 /opt/curlssl/lib/libcurl.so.4.2.0
00b7f000-00b83000 r-xp 00000000 fd:00 8716291 /lib/libsafe.so.2.0.16
00b83000-00b84000 rwxp 00003000 fd:00 8716291 /lib/libsafe.so.2.0.16
00b84000-00c9d000 r-xp 00000000 fd:00 10912094 /opt/xml2/lib/libxml2.so.2.7.8
00c9d000-00ca2000 rwxp 00119000 fd:00 10912094 /opt/xml2/lib/libxml2.so.2.7.8
00ca2000-00ca3000 rwxp 00ca2000 00:00 0
00dc2000-00dd8000 r-xp 00000000 fd:00 8717457 /lib/libselinux.so.1
00dd8000-00dda000 rwxp 00015000 fd:00 8717457 /lib/libselinux.so.1
00ddc000-00df1000 r-xp 00000000 fd:00 8717453 /lib/libnsl-2.5.so
00df1000-00df2000 r-xp 00014000 fd:00 8717453 /lib/libnsl-2.5.so
00df2000-00df3000 rwxp 00015000 fd:00 8717453 /lib/libnsl-2.5.so
00df3000-00df5000 rwxp 00df3000 00:00 0
00df5000-00f48000 r-xp 00000000 fd:00 8717438 /lib/libc-2.5.so
00f48000-00f4a000 r-xp 00153000 fd:00 8717438 /lib/libc-2.5.so
00f4a000-00f4b000 rwxp 00155000 fd:00 8717438 /lib/libc-2.5.so
00f4b000-00f4e000 rwxp 00f4b000 00:00 0
00f5f000-00f9a000 r-xp 00000000 fd:00 10911748 /opt/pcre/lib/libpcre.so.0.0.1
00f9a000-00f9b000 rwxp 0003a000 fd:00 10911748 /opt/pcre/lib/libpcre.so.0.0.1
00f9b000-010e6000 r-xp 00000000 fd:00 14648154 /usr/local/zend/lib/optimizer-3.3.9/php-5.2.x/zendoptimizer.so
010e6000-010f7000 rwxp 0014b000 fd:00 14648154 /usr/local/zend/lib/optimizer-3.3.9/php-5.2.x/zendoptimizer.so
010f7000-010fc000 rwxp 010f7000 00:00 0
04537000-0455d000 r-xp 00000000 fd:00 14200338 /usr/lib/libk5crypto.so.3.1
0455d000-0455e000 rwxp 00025000 fd:00 14200338 /usr/lib/libk5crypto.so.3.1
04560000-045f4000 r-xp 00000000 fd:00 14200339 /usr/lib/libkrb5.so.3.3
045f4000-045f7000 rwxp 00093000 fd:00 14200339 /usr/lib/libkrb5.so.3.3
045f9000-04626000 r-xp 00000000 fd:00 14200340 /usr/lib/libgssapi_krb5.so.2.2
04626000-04627000 rwxp 0002d000 fd:00 14200340 /usr/lib/libgssapi_krb5.so.2.2
04649000-0468d000 r-xp 00000000 fd:00 8717460 /lib/libssl.so.0.9.8e
0468d000-04691000 rwxp 00043000 fd:00 8717460 /lib/libssl.so.0.9.8e
046ed000-046f7000 r-xp 00000000 fd:00 8717466 /lib/libpam.so.0.81.5
046f7000-046f8000 rwxp 0000a000 fd:00 8717466 /lib/libpam.so.0.81.5
047ce000-047d9000 r-xp 00000000 fd:00 8717448 /lib/libgcc_s-4.1.2-20080825.so.1
047d9000-047da000 rwxp 0000a000 fd:00 8717448 /lib/libgcc_s-4.1.2-20080825.so.1
04846000-0484f000 r-xp 00000000 fd:00 8717450 /lib/libcrypt-2.5.so
0484f000-04850000 r-xp 00008000 fd:00 8717450 /lib/libcrypt-2.5.so
04850000-04851000 rwxp 00009000 fd:00 8717450 /lib/libcrypt-2.5.so
04851000-04878000 rwxp 04851000 00:00 0
049b1000-04a91000 r-xp 00000000 fd:00 14199741 /usr/lib/libstdc++.so.6.0.8
04a91000-04a95000 r-xp 000df000 fd:00 14199741 /usr/lib/libstdc++.so.6.0.8
04a95000-04a96000 rwxp 000e3000 fd:00 14199741 /usr/lib/libstdc++.so.6.0.8
04a96000-04a9c000 rwxp 04a96000 00:00 0
08048000-08487000 r-xp 00000000 fd:00 14197332 /usr/bin/php
08487000-084b1000 rw-p 0043f000 fd:00 14197332 /usr/bin/php
084b1000-084bb000 rw-p 084b1000 00:00 0
08658000-096a7000 rw-p 08658000 00:00 0 [heap]
b7ac3000-b7be9000 rw-p b7ac3000 00:00 0
b7be9000-b7d2a000 rw-p b7d2a000 00:00 0
b7dab000-b7eec000 rw-p b7eec000 00:00 0
b7eec000-b7f76000 rw-p b7eec000 00:00 0
b7f82000-b7f83000 rw-p b7f82000 00:00 0
bfd58000-bfd73000 rwxp bffe2000 00:00 0 [stack]
bfd73000-bfd74000 rw-p bfffe000 00:00 0

---

از خود csf کمک بگیرید . فکر کنم همین رو خواهند گفت . البته نسخه لیسانس دار vbseo استفاده کنید فکر نکنم این مشکل رو داشته باشه هر چند که به این نمیشه مشکل گفت.