7 Feb
2011
7 Feb
'11
7:06 p.m.
Hi !
I think one of my machine got hacked, but I can figure out from where...
I found some suspicious file in /bin and /usr/bin directories that are owned by user id 122, where this machine doesn't a userid 122.
So, does anyone hav a centos 3.9 install arround that can send me the info about (filesize, md5, modification date) these file :
/bin : ls netstat ps
/usr/bin/ dir find md5sum pstree slocate tee top
What tiped me off, I was sudoing to another user, and swas this message : "Unknown HZ value! (92) Assume 100."
Thanks