Help I am in problem.....
Dear friends,i am in big trouble..Last week i found about 10,000 msgs in queue and on investigation found that a script running on the server is sending those spam mails
script was some thing like this
/tmp/ perl sende.pl --someid@somedomain.br
i killed the process and deleted scripts from /tmp folder
But today i found the same problem again and noticed the same script in /tmp I don't understan who is doing this and how?
As i found on the forums i searched for the apache logs for any possible lines containing 'wget' so that i can find the user who placed the script to the /tmp folder but didn't find any.
Can any body suggest me a soulution?
Thanks in advance