0
votes
1answer
824 views

Malicious activity on EXE:/usr/bin/php CMD:/usr/bin/php [duplicate]

Possible Duplicate: How do I deal with a compromised server? Checking the lfd.log and noticed a block log for a script: Jan 10 22:01:36 xxx lfd[871]: *User Processing* PID:27023 Kill:0 ...