Server hacked?

[Hal Burgiss]

On Tue, Jan 01, 2008 at 10:00:19PM -0000, Joris Dobbelsteen wrote:
> I'm having a Linux server running Ubuntu 6.06 LTS (under vmware) and it
> seems to have some quite weird behaviour. For some reason (or another)
> the box seems to create OUTGOING connections to an IRC server from a
> supposed kernel address. Below is a snapshot of the netstat output...
> 
> Can anyone provide some detailed information about this?
> (i.e. confirm my suspicion it is indeed a trojan or something)
> SYN_SENT   15412/[kjournald]

Google on kjournald. The box is cracked and likely rooted. 

-- 
Hal