• Support will be limited until May 8th, as I will be out of the office travelling. Thank you for your patience and understanding.

DbSEO questions

Status
Not open for further replies.

Sattvhelp

Customer
I installed, used, and enjoyed DbSEO Lite for a short while, but, could never get caching to work, and, it used to cause HUGE server loads, with thousands of dbseo.php messages in the logs, so, i tried to disable it, and was unable to. Eventually i managed to uninstall it, but, files were left behind. I continue to get 'excessive resources' messages from my server, regarding dbseo.php, as well as 'suspicious activity' emails, again about the same file. If i remove the file, or change its CHMOD properties, my entire forum fails to run.

I would really like to start to use DbSEO again, but, would it be possible for it to be installed, and setup in its entirety, including the php caching, by yourselves, if so, is there a time frame for support after the install, if i continue to get emails from the server about it causing excessine loads, or suspicious activities

As with other products i have purchased, i would go straight for the lifetime option, plus the installation fees if i can be assured that it will all be setup and get rid of the issues i currently have, even though the lite version has been removed

Thank you for your time
 
heres an example of the 'suspicious activity' emails i receive

==============================================

Time: Thu Oct 16 01:01:26 2014 +0100
PID: 22968 (Parent PID:20612)
Account: REMOVED BY POSTER
Uptime: 2592109 seconds


Executable:

/usr/bin/php


Command Line (often faked in exploits):

/usr/bin/php REMOVED BY POSTER/dbseo.php


Network connections by the process (if any):

tcp: 31.170.106.83:57563 -> 173.194.112.82:80


Files open by the process (if any):

(deleted)/tmp/.apc.UVZU7h
(deleted)/tmp/.apc.mHDs52
(deleted)/tmp/.apc.gPl02N
(deleted)/tmp/.apc.e2ny0y
(deleted)/tmp/.apc.fZx6Xj
(deleted)/tmp/.apc.WUNZV4


Memory maps by the process (if any):

08048000-086ee000 r-xp 00000000 09:06 71270403 /usr/bin/php
086ee000-086fb000 rw-p 006a6000 09:06 71270403 /usr/bin/php
086fb000-0871a000 rw-p 00000000 00:00 0
08a53000-090ae000 rw-p 00000000 00:00 0 [heap]
b2a33000-b2a74000 rw-p 00000000 00:00 0
b2b6e000-b2b72000 r-xp 00000000 09:06 26903431 (deleted)/lib/libnss_dns-2.5.so
b2b72000-b2b73000 r--p 00003000 09:06 26903431 (deleted)/lib/libnss_dns-2.5.so
b2b73000-b2b74000 rw-p 00004000 09:06 26903431 (deleted)/lib/libnss_dns-2.5.so
b2b7b000-b2c7e000 rw-p 00000000 00:00 0
b2c7e000-b3c7e000 rw-s 00000000 00:6e 2291067976 (deleted)/dev/zero
b3c7e000-b5c7e000 rw-s 00000000 00:6e 2291067962 (deleted)/dev/zero
b5c7e000-b5c88000 r-xp 00000000 09:06 26903472 (deleted)/lib/libnss_files-2.5.so
b5c88000-b5c89000 r--p 00009000 09:06 26903472 (deleted)/lib/libnss_files-2.5.so
b5c89000-b5c8a000 rw-p 0000a000 09:06 26903472 (deleted)/lib/libnss_files-2.5.so
b5c8a000-b5c95000 r-xp 00000000 09:06 26906195 (deleted)/lib/libgcc_s-4.1.2-20080825.so.1;542b3d6e
b5c95000-b5c96000 rw-p 0000a000 09:06 26906195 (deleted)/lib/libgcc_s-4.1.2-20080825.so.1;542b3d6e
b5c96000-b5c97000 ---p 00000000 00:00 0
b5c97000-b6697000 rwxp 00000000 00:00 0
b6697000-b669e000 r-xp 00000000 09:06 33514490 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo_mysql.so
b669e000-b669f000 rw-p 00006000 09:06 33514490 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo_mysql.so
b669f000-b66aa000 r-xp 00000000 09:06 33514443 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/memcache.so
b66aa000-b66ab000 rw-p 0000b000 09:06 33514443 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/memcache.so
b66ab000-b66c9000 r-xp 00000000 09:06 33513579 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/apc.so
b66c9000-b66cb000 rw-p 0001e000 09:06 33513579 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/apc.so
b66cb000-b66d0000 rw-p 00000000 00:00 0
b66d0000-b6770000 r-xp 00000000 09:06 33514491 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo_sqlite.so
b6770000-b6772000 rw-p 0009f000 09:06 33514491 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo_sqlite.so
b6772000-b678c000 r-xp 00000000 09:06 33514489 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo.so
b678c000-b678d000 rw-p 00019000 09:06 33514489 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/pdo.so
b678d000-b67ae000 r-xp 00000000 09:06 33514445 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/eaccelerator.so
b67ae000-b67af000 rw-p 00020000 09:06 33514445 /usr/local/lib/php/extensions/no-debug-non-zts-20100525/eaccelerator.so
b67af000-b6878000 r-xp 00000000 09:06 33252041 /usr/local/Zend/lib/Guard-6.0.0/php-5.4.x/ZendGuardLoader.so
b6878000-b688a000 rw-p 000c9000 09:06 33252041 /usr/local/Zend/lib/Guard-6.0.0/php-5.4.x/ZendGuardLoader.so
b688a000-b688d000 rw-p 00000000 00:00 0
b688d000-b6989000 r-xp 00000000 09:06 33252029 /usr/local/IonCube/ioncube_loader_lin_5.4.so
b6989000-b698c000 rw-p 000fb000 09:06 33252029 /usr/local/IonCube/ioncube_loader_lin_5.4.so
b698c000-b6afb000 rw-p 00000000 00:00 0
b6afb000-b6b36000 r-xp 00000000 09:06 26906223 /lib/libsepol.so.1
b6b36000-b6b37000 rw-p 0003b000 09:06 26906223 /lib/libsepol.so.1
b6b37000-b6b41000 rw-p 00000000 00:00 0
b6b41000-b6b57000 r-xp 00000000 09:06 26906221 /lib/libselinux.so.1
b6b57000-b6b59000 rw-p 00015000 09:06 26906221 /lib/libselinux.so.1
b6b59000-b6b5a000 rw-p 00000000 00:00 0
b6b5a000-b6b5c000 r-xp 00000000 09:06 26906200 /lib/libkeyutils-1.2.so
b6b5c000-b6b5d000 rw-p 00001000 09:06 26906200 /lib/libkeyutils-1.2.so
b6b5d000-b6b65000 r-xp 00000000 09:06 71311390 (deleted)/usr/lib/libkrb5support.so.0.1
b6b65000-b6b66000 rw-p 00007000 09:06 71311390 (deleted)/usr/lib/libkrb5support.so.0.1
b6b66000-b6b6b000 r-xp 00000000 09:06 33212239 /usr/lib/libXdmcp.so.6.0.0
b6b6b000-b6b6c000 rw-p 00004000 09:06 33212239 /usr/lib/libXdmcp.so.6.0.0
b6b6c000-b6b6e000 r-xp 00000000 09:06 33212237 /usr/lib/libXau.so.6.0.0
b6b6e000-b6b6f000 rw-p 00001000 09:06 33212237 /usr/lib/libXau.so.6.0.0
b6b6f000-b6b86000 r-xp 00000000 09:06 26906167 /lib/libaudit.so.0.0.0
b6b86000-b6b88000 rw-p 00016000 09:06 26906167 /lib/libaudit.so.0.0.0
b6b88000-b6b89000 rw-p 00000000 00:00 0
b6b89000-b6b9f000 r-xp 00000000 09:06 26903518 (deleted)/lib/libpthread-2.5.so
b6b9f000-b6ba0000 r--p 00015000 09:06 26903518 (deleted)/lib/libpthread-2.5.so
b6ba0000-b6ba1000 rw-p 00016000 09:06 26903518 (deleted)/lib/libpthread-2.5.so
b6ba1000-b6ba3000 rw-p 00000000 00:00 0
b6ba3000-b6bb4000 r-xp 00000000 09:06 26903605 (deleted)/lib/libresolv-2.5.so
b6bb4000-b6bb5000 r--p 00010000 09:06 26903605 (deleted)/lib/libresolv-2.5.so
b6bb5000-b6bb6000 rw-p 00011000 09:06 26903605 (deleted)/lib/libresolv-2.5.so
b6bb6000-b6bb8000 rw-p 00000000 00:00 0
b6bb8000-b6d0e000 r-xp 00000000 09:06 26902995 (deleted)/lib/libc-2.5.so
b6d0e000-b6d10000 r--p 00156000 09:06 26902995 (deleted)/lib/libc-2.5.so
b6d10000-b6d11000 rw-p 00158000 09:06 26902995 (deleted)/lib/libc-2.5.so
b6d11000-b6d14000 rw-p 00000000 00:00 0
b6d14000-b6e86000 r-xp 00000000 09:06 32770099 /opt/xml2/lib/libxml2.so.2.9.1
b6e86000-b6e8c000 rw-p 00171000 09:06 32770099 /opt/xml2/lib/libxml2.so.2.9.1
b6e8c000-b6ebc000 r-xp 00000000 09:06 33212357 /usr/lib/libidn.so.11.5.19
b6ebc000-b6ebd000 rw-p 0002f000 09:06 33212357 /usr/lib/libidn.so.11.5.19
b6ebd000-b6ebe000 rw-p 00000000 00:00 0
b6ebe000-b6f14000 r-xp 00000000 09:06 32770102 /opt/curlssl/lib/libcurl.so.4.3.0
b6f14000-b6f16000 rw-p 00055000 09:06 32770102 /opt/curlssl/lib/libcurl.so.4.3.0
b6f16000-b6f18000 r-xp 00000000 09:06 26906173 (deleted)/lib/libcom_err.so.2.1
b6f18000-b6f19000 rw-p 00001000 09:06 26906173 (deleted)/lib/libcom_err.so.2.1
b6f19000-b6f3f000 r-xp 00000000 09:06 71311378 (deleted)/usr/lib/libk5crypto.so.3.1
b6f3f000-b6f40000 rw-p 00025000 09:06 71311378 (deleted)/usr/lib/libk5crypto.so.3.1
b6f40000-b6fd4000 r-xp 00000000 09:06 71311388 (deleted)/usr/lib/libkrb5.so.3.3
b6fd4000-b6fd7000 rw-p 00093000 09:06 71311388 (deleted)/usr/lib/libkrb5.so.3.3
b6fd7000-b7003000 r-xp 00000000 09:06 71311374 (deleted)/usr/lib/libgssapi_krb5.so.2.2
b7003000-b7004000 rw-p 0002c000 09:06 71311374 (deleted)/usr/lib/libgssapi_krb5.so.2.2
b7004000-b7019000 r-xp 00000000 09:06 26903400 (deleted)/lib/libnsl-2.5.so
b7019000-b701a000 r--p 00014000 09:06 26903400 (deleted)/lib/libnsl-2.5.so
b701a000-b701b000 rw-p 00015000 09:06 26903400 (deleted)/lib/libnsl-2.5.so
b701b000-b701e000 rw-p 00000000 00:00 0
b701e000-b7045000 r-xp 00000000 09:06 26903160 (deleted)/lib/libm-2.5.so
b7045000-b7046000 r--p 00026000 09:06 26903160 (deleted)/lib/libm-2.5.so
b7046000-b7047000 rw-p 00027000 09:06 26903160 (deleted)/lib/libm-2.5.so
b7047000-b704e000 r-xp 00000000 09:06 26903663 (deleted)/lib/librt-2.5.so
b704e000-b704f000 r--p 00007000 09:06 26903663 (deleted)/lib/librt-2.5.so
b704f000-b7050000 rw-p 00008000 09:06 26903663 (deleted)/lib/librt-2.5.so
b7050000-b70a0000 r-xp 00000000 09:06 32769851 /opt/pcre/lib/libpcre.so.1.2.3
b70a0000-b70a1000 rw-p 0004f000 09:06 32769851 /opt/pcre/lib/libpcre.so.1.2.3
b70a1000-b70c2000 r-xp 00000000 09:06 33212367 /usr/lib/libjpeg.so.62.0.0
b70c2000-b70c3000 rw-p 00020000 09:06 33212367 /usr/lib/libjpeg.so.62.0.0
b70c3000-b70d5000 r-xp 00000000 09:06 26906231 /lib/libz.so.1.2.3
b70d5000-b70d6000 rw-p 00011000 09:06 26906231 /lib/libz.so.1.2.3
b70d6000-b70fb000 r-xp 00000000 09:06 33212446 /usr/lib/libpng12.so.0.10.0
b70fb000-b70fc000 rw-p 00024000 09:06 33212446 /usr/lib/libpng12.so.0.10.0
b70fc000-b70fd000 rw-p 00000000 00:00 0
b70fd000-b710d000 r-xp 00000000 09:06 33212246 /usr/lib/libXpm.so.4.11.0
b710d000-b710e000 rw-p 00010000 09:06 33212246 /usr/lib/libXpm.so.4.11.0
b710e000-b720d000 r-xp 00000000 09:06 33212236 /usr/lib/libX11.so.6.2.0
b720d000-b7211000 rw-p 000ff000 09:06 33212236 /usr/lib/libX11.so.6.2.0
b7211000-b721b000 r-xp 00000000 09:06 26906213 /lib/libpam.so.0.81.5
b721b000-b721c000 rw-p 0000a000 09:06 26906213 /lib/libpam.so.0.81.5
b721c000-b7262000 r-xp 00000000 09:06 50651143 /lib/libssl.so.0.9.8e
b7262000-b7266000 rw-p 00045000 09:06 50651143 /lib/libssl.so.0.9.8e
b7266000-b7390000 r-xp 00000000 09:06 50651141 /lib/libcrypto.so.0.9.8e
b7390000-b73a4000 rw-p 00129000 09:06 50651141 /lib/libcrypto.so.0.9.8e
b73a4000-b73a7000 rw-p 00000000 00:00 0
b73a7000-b73aa000 r-xp 00000000 09:06 26903150 (deleted)/lib/libdl-2.5.so
b73aa000-b73ab000 r--p 00002000 09:06 26903150 (deleted)/lib/libdl-2.5.so
b73ab000-b73ac000 rw-p 00003000 09:06 26903150 (deleted)/lib/libdl-2.5.so
b73ac000-b73ad000 rw-p 00000000 00:00 0
b73ad000-b73b3000 r-xp 00000000 09:06 33212388 /usr/lib/libltdl.so.3.1.4
b73b3000-b73b4000 rw-p 00005000 09:06 33212388 /usr/lib/libltdl.so.3.1.4
b73b4000-b73e1000 r-xp 00000000 09:06 32768263 /opt/libmcrypt/lib/libmcrypt.so.4.4.8
b73e1000-b73e4000 rw-p 0002c000 09:06 32768263 /opt/libmcrypt/lib/libmcrypt.so.4.4.8
b73e4000-b73ea000 rw-p 00000000 00:00 0
b73ea000-b76b8000 r-xp 00000000 09:06 33212014 /usr/lib/libmysqlclient.so.18.0.0
b76b8000-b7731000 rw-p 002cd000 09:06 33212014 /usr/lib/libmysqlclient.so.18.0.0
b7731000-b7734000 rw-p 00000000 00:00 0
b7734000-b773d000 r-xp 00000000 09:06 26903132 (deleted)/lib/libcrypt-2.5.so
b773d000-b773e000 r--p 00008000 09:06 26903132 (deleted)/lib/libcrypt-2.5.so
b773e000-b773f000 rw-p 00009000 09:06 26903132 (deleted)/lib/libcrypt-2.5.so
b773f000-b7766000 rw-p 00000000 00:00 0
b776d000-b776e000 rw-p 00000000 00:00 0
b776e000-b776f000 r-xp 00000000 00:00 0 [vdso]
b776f000-b778a000 r-xp 00000000 09:06 26902950 (deleted)/lib/ld-2.5.so
b778a000-b778b000 r--p 0001a000 09:06 26902950 (deleted)/lib/ld-2.5.so
b778b000-b778c000 rw-p 0001b000 09:06 26902950 (deleted)/lib/ld-2.5.so
bfd2c000-bfd40000 rwxp 00000000 00:00 0 [stack]
bfd40000-bfd41000 rw-p 00000000 00:00 0
 
an example of the 'excessive resources' emails

Time: Fri Oct 17 02:02:34 2014 +0100
Account: REMOVED BY POSTER
Process Count: 31 (Not killed)

Process Information:

User:REMOVED BY POSTERPID:31263 PPID:29809 Run Time:84(secs) Memory:92304(kb) exe:/usr/bin/php cmd:/usr/bin/php REMOVED BY POSTER/dbseo.php
User:REMOVED BY POSTERPID:31267 PPID:30938 Run Time:84(secs) Memory:92752(kb) exe:/usr/bin/php cmd:/usr/bin/php REMOVED BY POSTER/dbseo.php
User:REMOVED BY POSTERPID:31268 PPID:26035 Run Time:84(secs) Memory:92752(kb) exe:/usr/bin/php cmd:/usr/bin/php REMOVED BY POSTER/dbseo.php
User:REMOVED BY POSTERPID:31269 PPID:31088 Run Time:84(secs) Memory:92752(kb) exe:/usr/bin/php cmd:/usr/bin/php REMOVED BY POSTER/dbseo.php
User:REMOVED BY POSTERPID:31291 PPID:31277 Run Time:60(secs) Memory:89420(kb) exe:/usr/bin/php cmd:/usr/bin/php REMOVED BY POSTER/dbseo.php
User:REMOVED BY POSTERPID:31300 PPID:31091 Run Time:59(secs) Memory:89420(kb) exe:/usr/bin/php cmd:/usr/bin/php REMOVED BY POSTER/dbseo.php
User:REMOVED BY POSTERPID:31303 PPID:31289 Run Time:57(secs) Memory:89420(kb) exe:/usr/bin/php cmd:/usr/bin/php REMOVED BY POSTER/dbseo.php
User:REMOVED BY POSTERPID:31304 PPID:31287 Run Time:57(secs) Memory:88340(kb) exe:/usr/bin/php cmd:/usr/bin/php REMOVED BY POSTER/dbseo.php
User:REMOVED BY POSTERPID:31312 PPID:30112 Run Time:55(secs) Memory:88340(kb) exe:/usr/bin/php cmd:/usr/bin/php REMOVED BY POSTER/dbseo.php
User:REMOVED BY POSTERPID:31316 PPID:29779 Run Time:54(secs) Memory:89420(kb) exe:/usr/bin/php cmd:/usr/bin/php REMOVED BY POSTER/dbseo.php
User:REMOVED BY POSTERPID:31320 PPID:29817 Run Time:53(secs) Memory:89420(kb) exe:/usr/bin/php cmd:/usr/bin/php REMOVED BY POSTER/dbseo.php
User:REMOVED BY POSTERPID:31329 PPID:31288 Run Time:47(secs) Memory:89420(kb) exe:/usr/bin/php cmd:/usr/bin/php REMOVED BY POSTER/dbseo.php
User:REMOVED BY POSTERPID:31332 PPID:31313 Run Time:47(secs) Memory:89420(kb) exe:/usr/bin/php cmd:/usr/bin/php REMOVED BY POSTER/dbseo.php
User:REMOVED BY POSTERPID:31339 PPID:31324 Run Time:43(secs) Memory:89420(kb) exe:/usr/bin/php cmd:/usr/bin/php REMOVED BY POSTER/dbseo.php
User:REMOVED BY POSTERPID:31343 PPID:31333 Run Time:41(secs) Memory:89420(kb) exe:/usr/bin/php cmd:/usr/bin/php REMOVED BY POSTER/dbseo.php
User:REMOVED BY POSTERPID:31347 PPID:31290 Run Time:36(secs) Memory:89420(kb) exe:/usr/bin/php cmd:/usr/bin/php REMOVED BY POSTER/dbseo.php
User:REMOVED BY POSTERPID:31351 PPID:31319 Run Time:35(secs) Memory:89420(kb) exe:/usr/bin/php cmd:/usr/bin/php REMOVED BY POSTER/dbseo.php
User:REMOVED BY POSTERPID:31355 PPID:31323 Run Time:33(secs) Memory:88340(kb) exe:/usr/bin/php cmd:/usr/bin/php REMOVED BY POSTER/dbseo.php
User:REMOVED BY POSTERPID:31386 PPID:31092 Run Time:31(secs) Memory:89420(kb) exe:/usr/bin/php cmd:/usr/bin/php REMOVED BY POSTER/dbseo.php
User:REMOVED BY POSTERPID:31391 PPID:31346 Run Time:29(secs) Memory:89420(kb) exe:/usr/bin/php cmd:/usr/bin/php REMOVED BY POSTER/dbseo.php
User:REMOVED BY POSTERPID:31395 PPID:31349 Run Time:25(secs) Memory:89420(kb) exe:/usr/bin/php cmd:/usr/bin/php REMOVED BY POSTER/dbseo.php
User:REMOVED BY POSTERPID:31399 PPID:31354 Run Time:23(secs) Memory:89420(kb) exe:/usr/bin/php cmd:/usr/bin/php REMOVED BY POSTER/dbseo.php
User:REMOVED BY POSTERPID:31408 PPID:31394 Run Time:21(secs) Memory:88616(kb) exe:/usr/bin/php cmd:/usr/bin/php REMOVED BY POSTER/dbseo.php
User:REMOVED BY POSTERPID:31414 PPID:31397 Run Time:19(secs) Memory:89420(kb) exe:/usr/bin/php cmd:/usr/bin/php REMOVED BY POSTER/dbseo.php
User:REMOVED BY POSTERPID:31418 PPID:31402 Run Time:17(secs) Memory:89420(kb) exe:/usr/bin/php cmd:/usr/bin/php REMOVED BY POSTER/dbseo.php
User:REMOVED BY POSTERPID:31422 PPID:31356 Run Time:13(secs) Memory:89420(kb) exe:/usr/bin/php cmd:/usr/bin/php REMOVED BY POSTER/dbseo.php
User:REMOVED BY POSTERPID:31426 PPID:31413 Run Time:11(secs) Memory:89420(kb) exe:/usr/bin/php cmd:/usr/bin/php REMOVED BY POSTER/dbseo.php
User:REMOVED BY POSTERPID:31431 PPID:31417 Run Time:7(secs) Memory:89420(kb) exe:/usr/bin/php cmd:/usr/bin/php REMOVED BY POSTER/dbseo.php
User:REMOVED BY POSTERPID:31434 PPID:31421 Run Time:5(secs) Memory:89420(kb) exe:/usr/bin/php cmd:/usr/bin/php REMOVED BY POSTER/dbseo.php
User:REMOVED BY POSTERPID:31438 PPID:31423 Run Time:3(secs) Memory:88376(kb) exe:/usr/bin/php cmd:/usr/bin/php REMOVED BY POSTER/dbseo.php
User:REMOVED BY POSTERPID:31445 PPID:31425 Run Time:1(secs) Memory:89420(kb) exe:/usr/bin/php cmd:/usr/bin/php REMOVED BY POSTER/dbseo.php
 
You should log in to WHM and add exe:/usr/bin/php to the exclusions list in ConfigServer eXploit scanner. That's the most common cause for those emails.
 
should i still get notifications about that file using excessive resources even though dbseo lite is uninstalled though?

id like to use dbseo again, is it possible to have it all set up properly
 
You should not trust those monitoring scripts. The reason why it falsely reports DBSEO is using a high amount of resources is that all PHP requests are routed through dbseo.php, whereas before, each vBulletin script had its own individual entry in the resource usage tracker.
 
Status
Not open for further replies.
Back
Top