from ps command got such info:

root 23 15 0 Dec09 ? 00:00:00 [kblockd/2]
root 24 15 0 Dec09 ? 00:00:00 [kblockd/3]
root 25 15 0 Dec09 ? 00:00:00 [kacpid]
root 97 15 0 Dec09 ? 00:00:00 [kseriod]
root 149 15 0 Dec09 ? 00:00:00 [pdflush]
root 150 15 0 Dec09 ? 00:00:01 [pdflush]
root 151 15 0 Dec09 ? 00:00:11 [kswapd0]
root 152 15 0 Dec09 ? 00:00:00 [aio/0]
root 153 15 0 Dec09 ? 00:00:00 [aio/1]
root 154 15 0 Dec09 ? 00:00:00 [aio/2]
root 155 15 0 Dec09 ? 00:00:00 [aio/3]
root 312 1 0 Dec09 ? 00:00:00 [kirqd]
root 685 15 0 Dec09 ? 00:00:00 [khubd]
root 703 15 0 Dec09 ? 00:00:00 [ata/0]
root 704 15 0 Dec09 ? 00:00:00 [ata/1]
root 706 15 0 Dec09 ? 00:00:00 [ata/2]
root 709 15 0 Dec09 ? 00:00:00 [ata/3]
root 711 15 0 Dec09 ? 00:00:00 [ata_aux]
root 732 15 0 Dec09 ? 00:00:00 [scsi_eh_0]
root 733 15 0 Dec09 ? 00:00:00 [scsi_eh_1]
root 1042 15 0 Dec09 ? 00:00:09 [kjournald]
root 1242 1 0 Dec09 ? 00:00:00 udevd --daemon
root 1588 15 0 Dec09 ? 00:00:00 [kpsmoused]
root 1859 15 0 Dec09 ? 00:00:00 [kmirrord]
daemon 1993 1 0 Dec09 ? 00:00:00 /sbin/portmap
root 2202 1 0 Dec09 ? 00:00:00 /sbin/syslogd
root 2208 1 0 Dec09 ? 00:00:00 /sbin/klogd -x
bind 2220 1 0 Dec09 ? 00:00:19 /usr/sbin/named -t /var/named/ru
root 2282 1 0 Dec09 ? 00:00:00 /bin/sh /usr/bin/mysqld_safe
mysql 2319 2282 2 Dec09 ? 00:37:24 /usr/sbin/mysqld --basedir=/usr
root 2320 2282 0 Dec09 ? 00:00:00 logger -p daemon.err -t mysqld_s
postgres 2388 1 0 Dec09 ? 00:00:00 /usr/lib/postgresql/7.4/bin/post
postgres 2391 2388 0 Dec09 ? 00:00:00 postgres: stats buffer process
postgres 2392 2391 0 Dec09 ? 00:00:00 postgres: stats collector proces
root 2509 1 0 Dec09 ? 00:00:00 /usr/sbin/acpid -c /etc/acpi/eve
root 2519 1 0 Dec09 ? 00:00:00 /usr/lib/courier-imap/couriertcp
root 2521 1 0 Dec09 ? 00:00:00 /usr/sbin/courierlogger imapd
root 2530 1 0 Dec09 ? 00:00:00 /usr/lib/courier-imap/couriertcp
root 2532 1 0 Dec09 ? 00:00:00 /usr/sbin/courierlogger imapd-ss
root 2539 1 0 Dec09 ? 00:00:00 /usr/lib/courier-imap/couriertcp
root 2541 1 0 Dec09 ? 00:00:00 /usr/sbin/courierlogger pop3d
root 2549 1 0 Dec09 ? 00:00:00 /usr/lib/courier-imap/couriertcp
root 2551 1 0 Dec09 ? 00:00:00 /usr/sbin/courierlogger pop3d-ss
root 2610 1 0 Dec09 ? 00:00:00 /usr/sbin/inetd
qmails 2682 1 0 Dec09 ? 00:00:00 qmail-send
qmaill 2684 2682 0 Dec09 ? 00:00:00 splogger qmail 2
root 2685 2682 0 Dec09 ? 00:00:00 qmail-lspawn | /usr/bin/deliverq
qmailr 2686 2682 0 Dec09 ? 00:00:00 qmail-rspawn
qmailq 2687 2682 0 Dec09 ? 00:00:00 qmail-clean
root 2736 1 0 Dec09 ? 00:00:00 /usr/sbin/spamd --username=popus
popuser 2737 2736 0 Dec09 ? 00:00:00 spamd child
popuser 2738 2736 0 Dec09 ? 00:00:00 spamd child
root 2761 1 0 Dec09 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 2766 2761 0 Dec09 ? 00:00:00 /usr/sbin/apache2 -k start
root 2807 1 0 Dec09 ? 00:00:00 /usr/sbin/nmbd -D
root 2809 1 0 Dec09 ? 00:00:00 /usr/sbin/smbd -D
root 2818 2809 0 Dec09 ? 00:00:00 /usr/sbin/smbd -D
root 2820 1 0 Dec09 ? 00:00:00 /usr/sbin/sshd
tomcat 2829 1 0 Dec09 ? 00:00:00 su -p -s /bin/sh tomcat -c /usr/
tomcat 2831 2829 0 Dec09 ? 00:00:00 /usr/sbin/rotatelogs /usr/share/
tomcat 2838 1 0 Dec09 ? 00:00:03 /usr/lib/j2se/1.4/bin/java -Djav
statd 2884 1 0 Dec09 ? 00:00:00 /sbin/rpc.statd
daemon 2923 1 0 Dec09 ? 00:00:00 /usr/sbin/atd
root 2930 1 0 Dec09 ? 00:00:00 /usr/sbin/cron
root 2967 1 0 Dec09 tty1 00:00:00 /sbin/getty 38400 tty1
root 2968 1 0 Dec09 tty2 00:00:00 /sbin/getty 38400 tty2
root 2969 1 0 Dec09 tty3 00:00:00 /sbin/getty 38400 tty3
root 2970 1 0 Dec09 tty4 00:00:00 /sbin/getty 38400 tty4
root 2971 1 0 Dec09 tty5 00:00:00 /sbin/getty 38400 tty5
root 2972 1 0 Dec09 tty6 00:00:00 /sbin/getty 38400 tty6
www-data 3066 2761 0 Dec09 ? 00:01:27 /usr/sbin/apache2 -k start
www-data 7064 2761 0 02:36 ? 00:00:07 /usr/sbin/apache2 -k start
www-data 8283 2761 0 07:16 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 10441 2761 0 09:58 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 10555 2761 0 10:04 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 10646 2761 0 10:11 ? 00:00:04 /usr/sbin/apache2 -k start
www-data 10697 2761 0 10:13 ? 00:00:12 /usr/sbin/apache2 -k start
www-data 10805 2761 0 10:18 ? 00:00:01 /usr/sbin/apache2 -k start
www-data 10857 2761 0 10:19 ? 00:00:06 /usr/sbin/apache2 -k start
www-data 10883 2761 0 10:20 ? 00:00:13 /usr/sbin/apache2 -k start
www-data 10887 2761 0 10:20 ? 00:00:03 /usr/sbin/apache2 -k start
www-data 10891 2761 0 10:20 ? 00:00:02 /usr/sbin/apache2 -k start
www-data 10896 2761 0 10:20 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 10924 2761 0 10:24 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 10967 2761 0 10:25 ? 00:00:01 /usr/sbin/apache2 -k start
www-data 10982 2761 0 10:25 ? 00:00:01 /usr/sbin/apache2 -k start
www-data 10984 2761 0 10:25 ? 00:00:02 /usr/sbin/apache2 -k start
www-data 11017 2761 0 10:26 ? 00:00:03 /usr/sbin/apache2 -k start
www-data 11019 2761 0 10:27 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11020 2761 0 10:27 ? 00:00:02 /usr/sbin/apache2 -k start
www-data 11043 2761 0 10:27 ? 00:00:02 /usr/sbin/apache2 -k start
www-data 11048 2761 0 10:28 ? 00:00:01 /usr/sbin/apache2 -k start
www-data 11077 2761 0 10:28 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11081 2761 0 10:29 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11082 2761 0 10:29 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11083 2761 0 10:29 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11091 2761 0 10:29 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11102 2761 0 10:30 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11108 2761 0 10:30 ? 00:00:01 /usr/sbin/apache2 -k start
www-data 11111 2761 0 10:30 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11112 2761 0 10:30 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11117 2761 0 10:31 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11118 2761 0 10:31 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11125 2761 0 10:31 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11131 2761 0 10:31 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11133 2761 0 10:31 ? 00:00:01 /usr/sbin/apache2 -k start
www-data 11137 2761 0 10:31 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11143 2761 0 10:31 ? 00:00:04 /usr/sbin/apache2 -k start
www-data 11150 2761 0 10:31 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11152 2761 0 10:31 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11156 2761 0 10:32 ? 00:00:01 /usr/sbin/apache2 -k start
www-data 11160 2761 0 10:32 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11162 2761 0 10:32 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11167 2761 0 10:33 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11169 2761 0 10:33 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11170 2761 0 10:33 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11173 2761 0 10:33 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11175 2761 0 10:33 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11178 2761 0 10:33 ? 00:00:01 /usr/sbin/apache2 -k start
www-data 11183 2761 0 10:34 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11184 2761 0 10:34 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11189 2761 0 10:34 ? 00:00:01 /usr/sbin/apache2 -k start
www-data 11192 2761 0 10:34 ? 00:00:01 /usr/sbin/apache2 -k start
www-data 11194 2761 0 10:34 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11200 2761 0 10:38 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11201 2761 0 10:38 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11204 2761 0 10:38 ? 00:00:01 /usr/sbin/apache2 -k start
www-data 11208 2761 0 10:38 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11211 2761 0 10:38 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11214 2761 0 10:38 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11215 2761 0 10:38 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11238 2761 0 10:39 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11239 2761 0 10:39 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11241 2761 0 10:39 ? 00:00:01 /usr/sbin/apache2 -k start
www-data 11242 2761 0 10:39 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11244 2761 0 10:39 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11246 2761 0 10:39 ? 00:00:01 /usr/sbin/apache2 -k start
www-data 11247 2761 0 10:39 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11248 2761 0 10:39 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11249 2761 0 10:39 ? 00:00:02 /usr/sbin/apache2 -k start
www-data 11253 2761 0 10:39 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11255 2761 0 10:39 ? 00:00:01 /usr/sbin/apache2 -k start
www-data 11257 2761 0 10:39 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11258 2761 0 10:39 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11260 2761 0 10:39 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11262 2761 0 10:39 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11264 2761 0 10:39 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11268 2761 0 10:40 ? 00:00:01 /usr/sbin/apache2 -k start
www-data 11269 2761 0 10:40 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11271 2761 0 10:40 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11273 2761 0 10:40 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11274 2761 0 10:40 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11278 2761 0 10:40 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11280 2761 0 10:40 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11281 2761 0 10:40 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11282 2761 0 10:40 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11288 2761 0 10:40 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11294 2761 0 10:41 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11297 2761 0 10:41 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11299 2761 0 10:41 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11300 2761 0 10:41 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11301 2761 0 10:41 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11302 2761 0 10:41 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11303 2761 0 10:41 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11304 2761 0 10:41 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11305 2761 0 10:42 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11306 2761 0 10:42 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11308 2761 0 10:42 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11309 2761 0 10:42 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11310 2761 0 10:42 ? 00:00:01 /usr/sbin/apache2 -k start
www-data 11313 2761 0 10:42 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11314 2761 0 10:42 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11315 2761 0 10:42 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11316 2761 0 10:42 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11317 2761 0 10:42 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11318 2761 0 10:42 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11319 2761 0 10:42 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11320 2761 0 10:42 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11322 2761 0 10:42 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11324 2761 0 10:42 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11325 2761 0 10:42 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11326 2761 0 10:42 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11327 2761 0 10:42 ? 00:00:01 /usr/sbin/apache2 -k start
www-data 11328 2761 0 10:42 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11329 2761 0 10:42 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11331 2761 0 10:42 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11332 2761 0 10:42 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11333 2761 0 10:42 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11336 2761 0 10:42 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11337 2761 0 10:42 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11338 2761 0 10:42 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11341 2761 0 10:43 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11342 2761 0 10:43 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11343 2761 0 10:43 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11344 2761 0 10:43 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11345 2761 0 10:43 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11346 2761 0 10:43 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11351 2761 0 10:43 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11352 2761 0 10:43 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11353 2761 0 10:43 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11356 2761 0 10:43 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11357 2761 0 10:43 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11358 2761 0 10:43 ? 00:00:00 /usr/sbin/apache2 -k start
root 11359 2820 0 10:43 ? 00:00:00 sshd: root@pts/0
www-data 11362 2761 0 10:43 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11363 2761 0 10:43 ? 00:00:00 /usr/sbin/apache2 -k start
root 11364 11359 0 10:43 pts/0 00:00:00 -bash
www-data 11369 2761 0 10:43 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11370 2761 0 10:43 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11371 2761 0 10:43 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11373 2761 0 10:43 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11374 2761 0 10:43 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11375 2761 0 10:43 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11376 2761 0 10:43 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11377 2761 0 10:43 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11378 2761 0 10:43 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11379 2761 0 10:43 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11381 2761 0 10:44 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11382 2761 0 10:44 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11383 2761 0 10:44 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11384 2761 0 10:44 ? 00:00:00 /usr/sbin/apache2 -k start
www-data 11385 2761 0 10:44 ? 00:00:00 /usr/sbin/apache2 -k start
root 11388 11364 0 10:46 pts/0 00:00:00 ps -ef