Title: autoptimize_64 process problem Last modified: November 27, 2021 --- # autoptimize_64 process problem * [behinam](https://wordpress.org/support/users/behinam/) * (@behinam) * [4 years, 6 months ago](https://wordpress.org/support/topic/autoptimize_64-process-problem/) * every day a process with autoptimize_64 name, run in server and losf result for this process like this: * lsof -p 8475 * ``` COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME autoptimi 8475 nshopir cwd DIR 8,1 4096 12719176 /home/nshopir/public_html/wp-content autoptimi 8475 nshopir rtd DIR 8,1 4096 2 / autoptimi 8475 nshopir txt REG 8,1 3147928 12720289 /home/nshopir/public_html/wp-content/autoptimize_64 (deleted) autoptimi 8475 nshopir mem REG 8,1 13333588 13631906 /var/db/nscd/hosts autoptimi 8475 nshopir mem REG 8,1 2156592 7602818 /usr/lib64/libc-2.17.so autoptimi 8475 nshopir mem REG 8,1 142144 7602844 /usr/lib64/libpthread-2.17.so autoptimi 8475 nshopir mem REG 8,1 163312 7602811 /usr/lib64/ld-2.17.so autoptimi 8475 nshopir 0r CHR 1,3 0t0 2052 /dev/null autoptimi 8475 nshopir 1w CHR 1,3 0t0 2052 /dev/null autoptimi 8475 nshopir 2w CHR 1,3 0t0 2052 /dev/null autoptimi 8475 nshopir 3r CHR 1,3 0t0 2052 /dev/null autoptimi 8475 nshopir 4u REG 8,1 4 12714424 /home/nshopir/public_html/wp-content/.pid autoptimi 8475 nshopir 5u CHR 1,3 0t0 2052 /dev/null autoptimi 8475 nshopir 6u unix 0xffff995dd0349dc0 0t0 1844599618 /tmp/lshttpd/APVH_nshopir_Suea-php74.sock autoptimi 8475 nshopir 7u IPv4 1847243718 0t0 TCP irn3.serversetup.co:39556->vserver312.axc.nl:https (SYN_SENT) autoptimi 8475 nshopir 8u a_inode 0,10 0 7690 [eventpoll] autoptimi 8475 nshopir 9u IPv4 1847253960 0t0 TCP ixxx.serversetup.co:57206->165.22.54.5:https (ESTABLISHED) autoptimi 8475 nshopir 10u IPv4 1847257345 0t0 TCP ixxx.serversetup.co:47448->world-205.ca.planethoster.net:https (ESTABLISHED) autoptimi 8475 nshopir 11u IPv4 1847230759 0t0 TCP ixxx.serversetup.co:33420->li854-201.members.linode.com:https (ESTABLISHED) autoptimi 8475 nshopir 12u IPv4 1847228656 0t0 TCP ixxx.serversetup.co:41524->83.150.52.108:https (ESTABLISHED) autoptimi 8475 nshopir 13u IPv4 1847257204 0t0 TCP ixxx.serversetup.co:49766->139.59.219.97:https (ESTABLISHED) autoptimi 8475 nshopir 14u IPv4 1847251725 0t0 UDP ixxx.serversetup.co:54234->dns.google:domain autoptimi 8475 nshopir 15u IPv4 1847255082 0t0 TCP ixxx.serversetup.co:54666->mx170161.superdata.vn:http (SYN_SENT) autoptimi 8475 nshopir 16u IPv4 1847257383 0t0 TCP ixxx.serversetup.co:33004->193.234.225.234:http (ESTABLISHED) autoptimi 8475 nshopir 17u IPv4 1847226987 0t0 TCP ixxx.serversetup.co:49006->cluster010.hosting.ovh.net:http (SYN_SENT) autoptimi 8475 nshopir 18u IPv4 1847257144 0t0 TCP ixxx.serversetup.co:47610->c23.hpms1.jp:https (ESTABLISHED) autoptimi 8475 nshopir 19u IPv4 1847257361 0t0 TCP ixxx.serversetup.co:50638->ip-107-180-3-147.ip.secureserver.net:https (ESTABLISHED) autoptimi 8475 nshopir 20u IPv4 1847251126 0t0 TCP ixxx.serversetup.co:43252->165.160.213.35.bc.googleusercontent.com:http (SYN_SENT) autoptimi 8475 nshopir 21u IPv4 1847230366 0t0 TCP ixxx.serversetup.co:39548->cluster030.hosting.ovh.net:https (SYN_SENT) autoptimi 8475 nshopir 22u IPv4 1847253351 0t0 TCP ixxx.serversetup.co:39984->hostingsrv24.dondominio.com:https (SYN_SENT) autoptimi 8475 nshopir 23u IPv4 1847229598 0t0 TCP ixxx.serversetup.co:59964->lhcp1020.webapps.net:https (SYN_SENT) autoptimi 8475 nshopir 24u IPv4 1847253566 0t0 TCP ixxx.serversetup.co:44370->r242-63.iq.pl:http (SYN_SENT) autoptimi 8475 nshopir 25u IPv4 1847257300 0t0 TCP ixxx.serversetup.co:35172->lhcp1105.webapps.net:https (SYN_SENT) autoptimi 8475 nshopir 26u IPv4 1847257275 0t0 TCP ixxx.serversetup.co:55388->server1.ltcpanama.com:https (ESTABLISHED) autoptimi 8475 nshopir 27u IPv4 1847257419 0t0 TCP ixxx.serversetup.co:33028->162.159.135.42:https (SYN_SENT) autoptimi 8475 nshopir 28u IPv4 1847255113 0t0 UDP ixxx.serversetup.co:53786->dns.google:domain autoptimi 8475 nshopir 29u IPv4 1847228977 0t0 TCP ixxx.serversetup.co:39426->lhcp3168.webapps.net:https (SYN_SENT) autoptimi 8475 nshopir 30u IPv4 1847257324 0t0 TCP ixxx.serversetup.co:34414->win04.plesk-secure.com:https (ESTABLISHED) autoptimi 8475 nshopir 31u IPv4 1847215454 0t0 TCP ixxx.serversetup.co:49164->kosmos.soundinglight.com:https (ESTABLISHED) autoptimi 8475 nshopir 32u IPv4 1847243795 0t0 TCP ixxx.serversetup.co:50530->cluster029.hosting.ovh.net:https (SYN_SENT) autoptimi 8475 nshopir 33u IPv4 1847243646 0t0 TCP ixxx.serversetup.co:34500->cluster015.ovh.net:https (SYN_SENT) autoptimi 8475 nshopir 34u IPv4 1847243724 0t0 TCP ixxx.serversetup.co:54612->33.69.208.35.bc.googleusercontent.com:https (SYN_SENT) autoptimi 8475 nshopir 35u IPv4 1847257305 0t0 TCP ixxx.serversetup.co:55712->10.10.34.35:https (SYN_SENT) autoptimi 8475 nshopir 36u IPv4 1847257187 0t0 TCP ixxx.serversetup.co:36538->cluster030.hosting.ovh.net:https (SYN_SENT) autoptimi 8475 nshopir 37u IPv4 1847230558 0t0 TCP ixxx.serversetup.co:35952->basic-cdn-01.cluster013.ovh.net:http (SYN_SENT) autoptimi 8475 nshopir 38u IPv4 1847253348 0t0 TCP ixxx.serversetup.co:35114->cluster015.ovh.net:https (SYN_SENT) autoptimi 8475 nshopir 39u IPv4 1847217099 0t0 TCP ixxx.serversetup.co:49356->cluster023.hosting.ovh.net:https (SYN_SENT) autoptimi 8475 nshopir 40u IPv4 1847253972 0t0 TCP ixxx.serversetup.co:50812->sc500.whpservers.com:https (SYN_SENT) autoptimi 8475 nshopir 41u IPv4 1847257339 0t0 TCP ixxx.serversetup.co:45834->149.28.235.69.vultr.com:https (ESTABLISHED) autoptimi 8475 nshopir 42u IPv4 1847253339 0t0 TCP ixxx.serversetup.co:41252->cluster027.hosting.ovh.net:http (SYN_SENT) autoptimi 8475 nshopir 43u IPv4 1847253297 0t0 TCP ixxx.serversetup.co:40562->cluster030.hosting.ovh.net:https (SYN_SENT) autoptimi 8475 nshopir 44u IPv4 1847216656 0t0 TCP ixxx.serversetup.co:38102->rspl19001.myhostingpack.com:https (ESTABLISHED) autoptimi 8475 nshopir 45u IPv4 1847257405 0t0 UDP ixxx.serversetup.co:37300->dns.google:domain autoptimi 8475 nshopir 46u IPv4 1847252219 0t0 TCP ixxx.serversetup.co:44952->ohp-ag006.int2000.net:http (SYN_SENT) autoptimi 8475 nshopir 47u IPv4 1847253588 0t0 TCP ixxx.serversetup.co:40026->mail.ancabalaban.ro:https (SYN_SENT) autoptimi 8475 nshopir 48u IPv4 1847257153 0t0 TCP ixxx.serversetup.co:58354->172.67.212.106:https (ESTABLISHED) autoptimi 8475 nshopir 49u IPv4 1847237254 0t0 TCP ixxx.serversetup.co:37018->nv4a5f5.lb.shared.prod.hostnet.nl:https (ESTABLISHED) autoptimi 8475 nshopir 50u IPv4 1847208843 0t0 TCP ixxx.serversetup.co:37770->159.65.179.133:https (ESTABLISHED) autoptimi 8475 nshopir 51u IPv4 1847253102 0t0 TCP ixxx.serversetup.co:36922->rochford.redbackinternet.net:https (SYN_SENT) autoptimi 8475 nshopir 52u IPv4 1847253857 0t0 TCP ixxx.serversetup.co:33720->web302.coolhandle.com:http (SYN_SENT) autoptimi 8475 nshopir 53u IPv4 1847251991 0t0 TCP ixxx.serversetup.co:43196->45.77.248.174.vultr.com:https (ESTABLISHED) autoptimi 8475 nshopir 54u IPv4 1847253778 0t0 TCP ixxx.serversetup.co:57912->cluster021.hosting.ovh.net:https (SYN_SENT) autoptimi 8475 nshopir 55u IPv4 1847233115 0t0 TCP ixxx.serversetup.co:59554->125.184.105.34.bc.googleusercontent.com:https (SYN_SENT) autoptimi 8475 nshopir 56u IPv4 1847202705 0t0 TCP ixxx.serversetup.co:53378->server.almerinet.org:https (SYN_SENT) autoptimi 8475 nshopir 57u IPv4 1847257365 0t0 TCP ixxx.serversetup.co:54246->ip-23-229-237-196.ip.secureserver.net:https (ESTABLISHED) autoptimi 8475 nshopir 58u IPv4 1847208475 0t0 TCP ixxx.serversetup.co:35944->thirtyone.qservers.net:http (SYN_SENT) autoptimi 8475 nshopir 59u IPv4 1847242828 0t0 TCP ixxx.serversetup.co:57862->cluster011.ovh.net:http (SYN_SENT) autoptimi 8475 nshopir 60u IPv4 1847233394 0t0 TCP ixxx.serversetup.co:42356->lhcp3113.webapps.net:http (SYN_SENT) autoptimi 8475 nshopir 61u IPv4 1847252066 0t0 TCP ixxx.serversetup.co:54722->cluster023.hosting.ovh.net:https (SYN_SENT) autoptimi 8475 nshopir 62u IPv4 1847235769 0t0 TCP ixxx.serversetup.co:52082->server08.purado.org:https (ESTABLISHED) autoptimi 8475 nshopir 63u IPv4 1847257341 0t0 TCP ixxx.serversetup.co:37474->15703-27353.bacloud.info:https (SYN_SENT) autoptimi 8475 nshopir 64u IPv4 1847188453 0t0 TCP ixxx.serversetup.co:41064->104.21.77.43:https (ESTABLISHED) autoptimi 8475 nshopir 65u IPv4 1847216273 0t0 TCP ixxx.serversetup.co:55310->webresult-srv.home:https (ESTABLISHED) autoptimi 8475 nshopir 66u IPv4 1847253128 0t0 TCP ixxx.serversetup.co:35420->ls106.tusite.net:https (SYN_SENT) ``` * I checked plugins and not found plugin with autoptimize name. I could not find the cause of the problem. Someone has an idea?? - This topic was modified 4 years, 6 months ago by [behinam](https://wordpress.org/support/users/behinam/). Viewing 3 replies - 1 through 3 (of 3 total) * Moderator [Steven Stern (sterndata)](https://wordpress.org/support/users/sterndata/) * (@sterndata) * Volunteer Forum Moderator * [4 years, 6 months ago](https://wordpress.org/support/topic/autoptimize_64-process-problem/#post-15109391) * The location of that file sure sounds suspicious. I recommend asking at [https://wordpress.org/support/plugin/autoptimize/#new-post](https://wordpress.org/support/plugin/autoptimize/#new-post) so the plugin’s developers and support community can help you with this. * If the plugin provides no such file, then you may have been hacked. Get a fresh cup of coffee, take a deep breath and carefully follow [this guide](https://wordpress.org/support/article/faq-my-site-was-hacked/). When you’re done, you may want to implement some (if not all) of [the recommended security measures](https://wordpress.org/support/article/hardening-wordpress/). * If you’re unable to clean your site(s) successfully, there are reputable organizations that can clean your sites for you. Sucuri and Wordfence are a couple. * [Optimizing Matters](https://wordpress.org/support/users/optimizingmatters/) * (@optimizingmatters) * [4 years, 6 months ago](https://wordpress.org/support/topic/autoptimize_64-process-problem/#post-15109617) * this Autoptimize developer confirms: not an Autoptimize file/ request, so it is likely your site has been compromised .. :-/ * frank (ao dev) * Thread Starter [behinam](https://wordpress.org/support/users/behinam/) * (@behinam) * [4 years, 6 months ago](https://wordpress.org/support/topic/autoptimize_64-process-problem/#post-15153216) * More information: * ``` Subject: Cron /home/username/public_html/wp-content/autoptimize_64 (deleted) > /dev/null 2>&1 Content-Type: text/plain; charset=UTF-8 Auto-Submitted: auto-generated Precedence: bulk X-Cron-Env: X-Cron-Env: X-Cron-Env: X-Cron-Env: X-Cron-Env: X-Cron-Env: X-Cron-Env: X-Cron-Env: Message-Id: Date: Sat, 11 Dec 2021 06:20:01 +0330 /usr/local/cpanel/bin/jailshell: -c: line 0: syntax error near unexpected token deleted' /usr/local/cpanel/bin/jailshell: -c: line 0: /home/user/public_html/wp-content/autoptimize_64 (deleted) > /dev/null 2>&1 ``` - This reply was modified 4 years, 6 months ago by [behinam](https://wordpress.org/support/users/behinam/). - This reply was modified 4 years, 6 months ago by [behinam](https://wordpress.org/support/users/behinam/). - This reply was modified 4 years, 6 months ago by [behinam](https://wordpress.org/support/users/behinam/). Viewing 3 replies - 1 through 3 (of 3 total) The topic ‘autoptimize_64 process problem’ is closed to new replies. * In: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/) * 3 replies * 3 participants * Last reply from: [behinam](https://wordpress.org/support/users/behinam/) * Last activity: [4 years, 6 months ago](https://wordpress.org/support/topic/autoptimize_64-process-problem/#post-15153216) * Status: not resolved ## Topics ### Topics with no replies ### Non-support topics ### Resolved topics ### Unresolved topics ### All topics