Some weird stuff happening on my server today, please leave comments if you know of anything about this…
I posted to bugtraq and people there are VERY helpful! Thanks a lot guys… I have turned on mod_security with Apache and I’m gonna go over the logs to see where exactly it came from in a little while…
I found the included script in /var/tmp called d0s.txt.
I found a bunch of processes called ./atac 20 running, and found the
following content in /tmp/atac:
here’s d0s.txt: http://andrewng.com/tmp/d0s.txt.bz2