How to use the background process killer in WHM ?

You can configure WHM to kill any of the following processes and send you an email when it finds one of them. Malicious users may run an IRC bouncer on their shell accounts even though this may be against your policy. WHM detects these processes correctly even if the bouncer is renamed (e.g. to something that appears non-malicious like “pine”, to give the impression that the user is just reading email)

If a process is found, the scanner will automatically kill the process and send you an e-mail telling you who was running it

WHM recommends that you check all of the programs in this list.

Procedure

Login to your WHM
Go to Home »System Health »Background Process Killer
You can select the programs
Using this text area, you may enter a list of users that you want the process killer to ignore, one per line
Press Save to finish