Hey all,Do I have to panic now? The log directory on our server disappeared last night (/var/log), and for some reason I have a user called 'boot' on my system, which I do not know why it is there, assigned to dialout and floppy groups...
chkrootkit doesn't find anything, but what does that mean now if the hacker is already inside with full access.
Thomas