hunting trojans: does vmail user need its own crond??
Brandon Vincent (Student)
Brandon.Vincent at asu.edu
Tue Jun 9 06:35:00 UTC 2015
Can you post the absolute path to the crond executable?
readlink -f /proc/3336/exe
Then, pstree can help you find what started the process:
pstree -H 1013
More information about the ubuntu-users