linux - Am i hacked? unknown processes dsfref, gfhddsfew, dsfref etc are starting automatically in centos 6.5 -


im using centos 6.5, realised computer uploading something(i didn't ask for), @ upload speed 11mbps, scary part internet upload speed 800kbps, every day shows 200gb uploaded , on.. can see unknown processes starting in image 1 attached.. gfhddsfew, sdmfdsfhjfe, gfhjrtfyhuf, dsfrefr, ferwfrre, rewgtf3er4t , sfewfesfs, sdmfdsfhjfe,

i tried kill processes manually kill command , deleted files /etc/ folder, still, if connect internet these files placed in /etc/ automatically, don't see issue in windows(my pc dual boot).

note: used chattr -i change permissions , deleted file sfewfesfs, when tried delete file without using chattr, says permissions cant changed/file cant deleted . , 1 more thing, when used command #rm /etc/sfewfesfs without chattr , computer restarted, happened time tried delete file without chattr. , these executables show in running processes when internt connected.

note: im using beam cable internet(beamtele.com ,hyderabad, india)

here images shows issue

issue depiction #1 issue depiction #2

yes, you're hacked!

congratulations!

it look's have rootkit, or vulnerability. try update system , use utilities rkhunter , clamav.

than need check system files

rpm -q --verify

or can reinstall system instead.


Comments

Popular posts from this blog

java - Intellij Synchronizing output directories .. -

git - Initial Commit: "fatal: could not create leading directories of ..." -