I need help about this topic. Hope anybody can tell me something!
I noticed this morning that my root password has changed. After recovering it, I saw a new user in my server called "c". This is what i found in bash_history of that user:
Does anyone know what this is?cd /tmp
wget http://www.unrealircd.com/downloads/Unr ... 8.1.tar.gz
tar -zxvf Unreal220.127.116.11.tar.gz
rm -fr Unreal18.104.22.168.tar.gz
make custommodule MODULEFILE=hideserver
tar zxvf antirandom.tar.gz
I found nothing in bash_history of the root user. I suppose he deleted it.