./cache.sh?

[Karl Auer]

An odd one today!

A client has a system that is running a process that shows up in the
process list as "./cache.sh". There is no file named "cache.sh"
anywhere on his system. This process is chewing up most of his CPU. If
stopped, it starts again after a few minutes. It starts on boot, too.

I thnk it's malware, and since this system is showing a few other signs
of compromise my immediate recommendation was to rebuild the system
from scratch, and that's what we'll probably do.

But I'm curious - has anyone seen this before? Google was little help
-there are a zillion "cache" things out there.

Regards, K.

-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Karl Auer (kauer at biplane.com.au)
http://www.biplane.com.au/kauer
http://twitter.com/kauer389

GPG fingerprint: A0CD 28F0 10BE FC21 C57C 67C1 19A6 83A4 9B0B 1D75
Old fingerprint: A52E F6B9 708B 51C4 85E6 1634 0571 ADF9 3C1C 6A3A