Re: [ilugd] Server is hacked, pl. advice

2010-12-03 Thread Naresh Narang
I today noticed my VPS was running too slow, then i logged into root , and found a lot of load on it ( 240 ). I did a ps -ef and a lot of process were running, a lot of them were user1     23771     1  0 15:36 pts/0    00:00:02 ./atack 800 Also in WHM i see a process user1 99.7 perl udp.pl

Re: [ilugd] Server is hacked, pl. advice

2010-12-03 Thread Raj Mathur (राज माथुर)
On Friday 03 Dec 2010, abhishek jain wrote: hi friends, I today noticed my VPS was running too slow, then i logged into root , and found a lot of load on it ( 240 ). I did a ps -ef and a lot of process were running, a lot of them were user1 23771 1 0 15:36 pts/000:00:02

Re: [ilugd] Server is hacked, pl. advice

2010-12-03 Thread Karanbir Singh
On 12/03/2010 06:26 AM, abhishek jain wrote: can anyone here suggest me what should i do, i am not sure how user1 logged into server, further what does the command perl udp.pl 92.114.6.32 0 22 mean which eats up 99.7% of CPU . You have already had a lot of good advice here, I'll add a few