From owner-freebsd-questions Thu Sep 3 18:08:01 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id SAA03204 for freebsd-questions-outgoing; Thu, 3 Sep 1998 18:08:01 -0700 (PDT) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from idial.idial.com (idial.idial.com [167.114.28.160]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id SAA03185 for ; Thu, 3 Sep 1998 18:07:41 -0700 (PDT) (envelope-from fresh@idial.com) Received: from internetos.acnet.net ([167.114.28.188]) by idial.idial.com (8.8.5/8.7.3) with SMTP id UAA03267 for ; Thu, 3 Sep 1998 20:06:20 -0500 (CDT) Date: Thu, 3 Sep 1998 20:06:20 -0500 (CDT) Message-Id: <199809040106.UAA03267@idial.idial.com> X-Sender: fresh@idial.com X-Mailer: Windows Eudora Light Version 1.5.2 Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" To: freebsd-questions@FreeBSD.ORG From: "Oscar Medina D." Subject: Heelllpp !!! Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Hi! Im the administrator of a FreeBSD 2.1.7-RELEASE (GENERIC)server on the internet and about 3 or 4 months i have noticed that wen IM as root i allways have the 31Dec69 date on a proces like this: (Taked with 'ps -aux') root 2739 0.0 0.1 460 12 p2 RV 31Dec69 0:00.00 -su -m (csh) i cant kill this process cause its PID is dynamic i mean it changes every time i run a proces as root it increments most of the time in two i mean, now is 2739, then is 2741, then 2743 and so. Also i have seen that the trafic of my network is bigger... I think is a trojan horse but... im not sure so please help me i need u r opinion thanx! bye bye To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message