General Support - Possible compromise? sk11 - 05.02.2007, 21:50 Uhr Titel: Possible compromise?
Hi guys,
I logged in to a work machine from home using ssh and found 2 processes running which I didn't initiate:
Code:
>ps x
21473 pts/15 S 0:00 /bin/ksh /etc/local/check_login
21475 pts/15 S 0:00 ypmatch myusername rgycmds
Is this something to worry about, a possible hacking? I have never even heard of ksh, I use bash/tcsh! Crest - 06.02.2007, 05:59 Uhr Titel: RE: Possible compromise?
I'm not an expert in all this running processes but I tend to say no.
pcalvert - 18.06.2007, 05:12 Uhr Titel:
Be sure to run chkrootkit to check for rootkits.
