Trojan Horses Detected by (WHM)

rasilva

Member
Mar 18, 2003
17
0
151
Hidden Pid detected! [pid 9046]
hidden from ps: [yes]
hidden from kernel: [yes]
binary location: [/dev/sdhu0/tehdrakg/sk]

Can anyone help??? :confused: :confused:

Thanks in advance.
 

eth00

Well-Known Member
PartnerNOC
Mar 30, 2003
721
1
168
NC
cPanel Access Level
Root Administrator
You have been rooted and your server is compromised. Basically you need to make a backup and have the server formatted. Next time make sure and secure your server, there are a few how-tos on the forum as to how and secure it. Of course always make sure you keep updated with patches and if you give shell acess always make sure the kernel is updated!