I've checked my system by aide and i've received information:
changed: /bin changed: /bin/tar changed: /bin/mv changed: /bin/cp changed: /bin/ls changed: /bin/vi
i don't remember that I changed those commands, what does it mean? Somebody broken in? or those commands are changed normally?