I need help about this topic. Hope anybody can tell me something!
I noticed this morning that my root password has changed. After recovering it, I saw a new user in my server called "c". This is what i found in bash_history of that user:
Does anyone know what this is?cd /tmp
wget http://www.unrealircd.com/downloads/Unr ... 8.1.tar.gz
tar -zxvf Unreal188.8.131.52.tar.gz
rm -fr Unreal184.108.40.206.tar.gz
make custommodule MODULEFILE=hideserver
tar zxvf antirandom.tar.gz
I found nothing in bash_history of the root user. I suppose he deleted it.