Found hacking scripts in /tmp/ & /home/tmp/
My CPU was up to 251.4 this evening.
3 scripts were running:
./mumu
./p
./vadimII
I found them under /tmp/ & /home/tmp/ with file permission nobody.nobody
How did they get in there? I ran chkrootkit, none infected
More hackings scripts under /tmp/ & /home/tmp/
km3
km3.tgz
saul.tgz
mumu.tgz
vadim.tgz
flood/ (full of dos scripts)
Help anyone?
