Suspicious File Alert

[pooyan]

Time: Sat Aug 4 17:32:04 2012 +0430
File: /tmp/lshttpd/bak_core/core.8724
Reason: Linux Binary
Owner: nobody:nobody (99:99)
Action: Moved into /etc/csf/suspicious.tar

I receive this email every ~5minutes
When i Switch to apache i not receive this email,

[pooyan]

Can you please help me?

[webizen]

Looks like your LSWS is dumping core. To help troubleshoot, install dbg version of lsws and send new cores to bug@

here is a sample dbg version download link. replace the version number with the one of your platform.

http://www.litespeedtech.com/package...nux-dbg.tar.gz

[pooyan]

need i install again lsws ?

[webizen]

Originally Posted by pooyan

need i install again lsws ?

Not the same package but the dbg counterpart.

[pooyan]

How do I use this file?
What should I do?

[webizen]

Here are the steps:

1. download and install the package
   

   wget http://www.litespeedtech.com/package...nux-dbg.tar.gz

   tar zxf lsws-4.1.13-ent-x86_64-linux-dbg.tar.gz

   cd lsws-4.1.13

   ./install.sh

   Note: choose 'U' for upgrade when prompted and default for the rest.

2. remove old core files

   rm /tmp/lshttpd/bak_core/*

3. send new core (or new /etc/csf/suspicious.tar) to bug@ when it generates.

[pooyan]

Would you like to Upgrade, Reinstall or Change directory [U/r/c]? U

[ERROR] Sorry, installation will abort without a valid license key.

For evaluation purpose, please obtain a trial license key from our web
site http://www.litespeedtech.com, copy it to this directory
and run Installer again.

If a production license has been purchased, please copy the serial number
from your confirmation email to this directory and run Installer again.

NOTE:
Please remember to set ftp to BINARY mode when you ftp trial.key from
another machine.

[webizen]

remove any trial.key and verify your license key. if no issue, do the upgrade again.

rm /usr/local/lsws/trial.key
rm /usr/local/lsws/conf/trial.key
/usr/local/lsws/bin/lshttpd -V

[pooyan]

Problem still hero.
Please help me,