[uselib24] uses 97.9% of CPU + some accounts indexs have been hacked
under (CPU/Memory/MySQL Usage)
this one marked red:
body 22.01%CPU 0.61 0.0
Top Process %CPU 97.9 [uselib24]
Top Process %CPU 97.8 [uselib24]
Top Process %CPU 94.2 [uselib24]
iam now runing (Rootkit Hunter).
and it reported:
Security advisories
* Check: Groups and Accounts
Searching for /etc/passwd... [ Found ]
Checking users with UID '0' (root)... [ OK ]
* Check: SSH
Searching for sshd_config...
Found /etc/ssh/sshd_config
Checking for allowed root login... Watch out Root login possible. Possible risk!
info:
Hint: See logfile for more information about this issue
Checking for allowed protocols... [ Warning (SSH v1 allowed) ]
aslo some sites where hacked and the indexes replaced with one contains (illusioooonnnnnnn)
--- and these files are in /tmp:
dc.txt
elflbl*
_elf_lib*
horde_32001.log
index.php
mysql.sock@
uselib24*
anysuggestions will be appreciated
regards
Maaking
