I would like to know how you find out which php-scripts are starting apache2-processes, which are causing high load.
It seems that one user is infected with malware (php-shell). LMD (maldet/maldetect) does not find the file, but there are php-processes that cause a high CPU load from time to time.
Now I would like to know which file started the apache2-process.
With strace I do not get the filename or -path.