On Thu, Aug 14, 2014 at 17:54, Scott Bonds wrote: > So...have I been p0wned or does anyone know what innocent thing might be > happening here? Please CC sc...@ggr.com on any replies, as I'm not > subscribed to updates from the list.
Bad news: yeah. They appear to have screwed up their rootkit by installing the i386 edition, but those files should not be there. I'd reinstall after giving some consideration to how this may have happened (and changing all your passwords, rotating ssh keys, etc.).
