Zombie HTTP Processes

Don't miss a thing. Post your questions and discussion about other uncategorized NAS features here.
Locked
danno321
Know my way around
Posts: 179
Joined: Fri Aug 07, 2009 1:36 am

Zombie HTTP Processes

Post by danno321 »

Code: Select all

Process Name	User	PID	Status	CPU Usage	Memory	
manaRequest.cgi	admin	14387	Zombie	0 %	0 KB
appRequest.cgi	admin	14404	Zombie	0 %	0 KB
manaRequest.cgi	admin	14406	Zombie	0 %	0 KB
chartReq.cgi	admin	14407	Zombie	0 %	0 KB
manaRequest.cgi	admin	14490	Zombie	0 %	0 KB
chartReq.cgi	admin	14509	Zombie	0 %	0 KB
manaRequest.cgi	admin	14572	Zombie	0 %	0 KB
_thttpd_	admin	14632	Zombie	0 %	0 KB
These Zombies sometimes up to 15 or so keep popping up and tying up CPU and memory; I ran Qboost to free up resources. This indicates bad programming and all are running under 'admin'. I think these Zombies are causing the SWAP Space warning.
TS-251A 2017 (previously TS-239 Pro 2009).
User avatar
dolbyman
Guru
Posts: 34903
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: Zombie HTTP Processes

Post by dolbyman »

i think those specific processes often appear on hacked devices..try running malware remover
danno321
Know my way around
Posts: 179
Joined: Fri Aug 07, 2009 1:36 am

Re: Zombie HTTP Processes

Post by danno321 »

Although MalwareRemover is in Apps and listed as installed I don't have an icon to run it. It does run automatically every early morning though. Do I have to fire it off from the command line via ssh?
TS-251A 2017 (previously TS-239 Pro 2009).
User avatar
dolbyman
Guru
Posts: 34903
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: Zombie HTTP Processes

Post by dolbyman »

having it installed should be enough..it runs automatically
if you are currently not logged into the webgui, those processes should not consume cpu cycles

if they still do, contact QNAP for further investigation
danno321
Know my way around
Posts: 179
Joined: Fri Aug 07, 2009 1:36 am

Re: Zombie HTTP Processes

Post by danno321 »

I did submit a ticket.
TS-251A 2017 (previously TS-239 Pro 2009).
danno321
Know my way around
Posts: 179
Joined: Fri Aug 07, 2009 1:36 am

Re: Zombie HTTP Processes

Post by danno321 »

Support said the ZOMBIE processes are not MALWARE and the MalwareRemover has no UI. I still question why the processes are not gracefully ended.
TS-251A 2017 (previously TS-239 Pro 2009).
User avatar
dolbyman
Guru
Posts: 34903
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: Zombie HTTP Processes

Post by dolbyman »

did they actually check ?

search for the process names and you will find that they have been used as malware in the past

if they checked ..then fine ...
danno321
Know my way around
Posts: 179
Joined: Fri Aug 07, 2009 1:36 am

Re: Zombie HTTP Processes

Post by danno321 »

No, QNAP Support did not log in. I sent them a list of the following processes marked ZOMBIE immediately after reboot. Why would these processes immediately be zombied after reboot?

Process Name User PID Status CPU Usage Memory
chartReq.cgi admin 25038 Zombie 0 % 0 KB
manaRequest.cgi admin 25043 Zombie 0 % 0 KB
chartReq.cgi admin 25136 Zombie 0 % 0 KB
manaRequest.cgi admin 25137 Zombie 0 % 0 KB
manaRequest.cgi admin 25147 Zombie 0 % 0 KB
appRequest.cgi admin 25262 Zombie 0 % 0 KB
syslogRequest.c admin 25267 Zombie 0 % 0 KB
manaRequest.cgi admin 25268 Zombie 0 % 0 KB
manaRequest.cgi admin 25270 Zombie 0 % 0 KB
manaRequest.cgi admin 25286 Zombie 0 % 0 KB
authLogin.cgi admin 25288 Zombie 0 % 0 KB
manaRequest.cgi admin 25329 Zombie 0 % 0 KB
sysRequest.cgi admin 25330 Zombie 0 % 0 KB
qsmart.cgi admin 25331 Zombie 0 % 0 KB
chartReq.cgi admin 25419 Zombie 0 % 0 KB
manaRequest.cgi admin 25421 Zombie 0 % 0 KB
chartReq.cgi admin 25509 Zombie 0.26 % 0 KB
_thttpd_ admin 25512 Zombie 0 % 0 KB
TS-251A 2017 (previously TS-239 Pro 2009).
danno321
Know my way around
Posts: 179
Joined: Fri Aug 07, 2009 1:36 am

Re: Zombie HTTP Processes

Post by danno321 »

Add:

Process Name User PID Status CPU Usage Memory
sh admin 4558 Zombie 0 % 0 KB
TS-251A 2017 (previously TS-239 Pro 2009).
protocolnebula
First post
Posts: 1
Joined: Sun Aug 01, 2021 11:49 pm

Re: Zombie HTTP Processes

Post by protocolnebula »

Hey,
Same problem here, but in my case CPU is from 4 to 14% permanently (rarely less than 3%).
I stopped ALL apps (except the one QNAS don't let me stop), rebooted, and remains the same issue.



I have another hard disk with the minimum installed setup: Virtual Station, HDMI (all stopped), and the CPU use goes from 0 to 3%.

Any idea?

Thanks :)

EDIT: Seems that sometimes it gets from 2 to 4% for a while, but I still have a lot job and the NAS is doing nothing.
User avatar
Don
Guru
Posts: 12289
Joined: Thu Jan 03, 2008 4:56 am
Location: Long Island, New York

Re: Zombie HTTP Processes

Post by Don »

protocolnebula wrote: Thu Aug 05, 2021 7:47 pm Hey,
Same problem here, but in my case CPU is from 4 to 14% permanently (rarely less than 3%).
I stopped ALL apps (except the one QNAS don't let me stop), rebooted, and remains the same issue.



I have another hard disk with the minimum installed setup: Virtual Station, HDMI (all stopped), and the CPU use goes from 0 to 3%.

Any idea?

Thanks :)

EDIT: Seems that sometimes it gets from 2 to 4% for a while, but I still have a lot job and the NAS is doing nothing.
Please open a new topic. Include information like NAS model, firmware version, process name, etc. You know, information that might actually help someone help you.
Use the forum search feature before posting.

Use RAID and external backups. RAID will protect you from disk failure, keep your system running, and data accessible while the disk is replaced, and the RAID rebuilt. Backups will allow you to recover data that is lost or corrupted, or from system failure. One does not replace the other.

NAS: TVS-882BR | F/W: 5.0.1.2346 | 40GB | 2 x 1TB M.2 SATA RAID 1 (System/VMs) | 3 x 1TB M.2 NMVe QM2-4P-384A RAID 5 (cache) | 5 x 14TB Exos HDD RAID 6 (Data) | 1 x Blu-ray
NAS: TVS-h674 | F/W: 5.0.1.2376 | 16GB | 3 x 18TB RAID 5
Apps: DNSMasq, PLEX, iDrive, QVPN, QLMS, MP3fs, HBS3, Entware, DLstation, VS, +
Locked

Return to “Miscellaneous”