Help I am in problem.....

Dear friends,


i am in big trouble..Last week i found about 10,000 msgs in queue and on investigation found that a script running on the server is sending those spam mails

script was some thing like this

/tmp/ perl sende.pl --someid@somedomain.br

i killed the process and deleted scripts from /tmp folder

But today i found the same problem again and noticed the same script in /tmp I don't understan who is doing this and how?

As i found on the forums i searched for the apache logs for any possible lines containing 'wget' so that i can find the user who placed the script to the /tmp folder but didn't find any.

Can any body suggest me a soulution?

Thanks in advance

 

 

 

 

Top