Re: [ilugd] Server is hacked, pl. advice

2010-12-02 Thread Sagar Belure
Hi, On Fri, Dec 3, 2010 at 11:56 AM, abhishek jain wrote: > hi friends, > I today noticed my VPS was running too slow, then i logged into root , and > found a lot of load on it (> 240 ). > I did a ps -ef and a lot of process were running, a lot of them were > > > user1 23771 1 0 15:36 pt

Re: [ilugd] Server is hacked, pl. advice

2010-12-02 Thread Vivek Kapoor
On 12/03/2010 11:56 AM, abhishek jain wrote: hi friends, I today noticed my VPS was running too slow, then i logged into root , and found a lot of load on it (> 240 ). I did a ps -ef and a lot of process were running, a lot of them were user1 23771 1 0 15:36 pts/000:00:02 ./atack

Re: [ilugd] Server is hacked, pl. advice

2010-12-02 Thread Anshul Chauhan
hi, kill all the process by user1, delete user1 if possible or change its password and check the users home directory if their is some script found and check its contents and see where all it has made changes. Warm Regards, Anshul Chauhan "Never expect things to happen struggle & make them hap

[ilugd] Server is hacked, pl. advice

2010-12-02 Thread abhishek jain
hi friends, I today noticed my VPS was running too slow, then i logged into root , and found a lot of load on it (> 240 ). I did a ps -ef and a lot of process were running, a lot of them were user1 23771 1 0 15:36 pts/000:00:02 ./atack 800 Also in WHM i see a process user1 99.7 per