I've checked my system by aide and i've received information:
 
changed: /bin
changed: /bin/tar
changed: /bin/mv
changed: /bin/cp
changed: /bin/ls
changed: /bin/vi
 
i don't remember that I changed those commands, what does it mean? Somebody broken in? or those commands are changed normally?

--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.