Server hacked, sau utilizatori adaugati fara permisiune ?

[madalin]

Am facut upgrade la 8.04.1 si observ ca in lista de useri mi-au aparut 3
utilizatori. 2 Dintre ei au /bin/false iar al 3lea are un /bin/sh.

Mi se pare destul de ciudat. Un lsof |grep LISTEN nu mi-a listat nimic.

Dau un copy/paste la utilizatorii respectivi, astept sugestii si pareri..

libuuid:x:123:131::/var/lib/libuuid:/bin/sh
pulse:x:124:132:PulseAudio daemon,,,:/var/run/pulse:/bin/false
polkituser:x:125:137:PolicyKit,,,:/var/run/PolicyKit:/bin/false


Stiti ceva de asta ?

-- 
Cu drag,
madalin
http://m.tg-jiu.ro
http://cezara.tg-jiu.ro
http://www.tg-jiu.ro
http://www.radioomega.ro
http://www.accestv.ro
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.ubuntu.com/archives/ubuntu-ro/attachments/20080713/bf530142/attachment.htm