[58355] in Hotline Meeting
strange process on w20-575-8
daemon@ATHENA.MIT.EDU (Ken T Takusagawa)
Thu Feb 14 16:31:44 2002
Date: Thu, 14 Feb 2002 16:31:43 -0500 (EST)
From: Ken T Takusagawa <kenta@MIT.EDU>
To: <hotline@MIT.EDU>
Message-ID: <Pine.LNX.4.30L.0202141629050.25011-100000@w20-575-8.mit.edu>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
There is a strange process with no name running as root on
w20-575-8. Normally I would just reboot to kill it, but
it's weirdness suggests it might be some sort of malicious
program (trojan horse, keystroke recorder, etc.) so I'm
leaving it to let you take a look.
--ken
