My server's been hacked EMERGENCY
My Linux machine has been hacked lately.
There are a few entires in /etc/inittab below the
#end of /etc/inittab
#Loading standard ttys 0:2345:once:/usr/sbin/ttyload
I also have serveral of the following lines:
2:2345:respawn:/sbin/mingetty tty2 3:2345:respawn:/sbin/mingetty tty3 . . .
I know that my
/usr/sbin/ttyload has been hacked, and I have removed it, but I don't know if I need this is inittab, nor whether I had ttyload before. Is this file common?
Should I remove this line?