LoadAvg and Hacked

[gmcust3]

Recently My server got hacked and after then I see my LoadAvg is around 70 or so .. CRAZY..

Accessed By :
-----------------------
64.78.171.100
79.119.36.218
79.119.39.176


[root@vici ~]# screen -ls
There are screens on:
5030.ASTVDremote (Detached)
3296.ASTfastlog (Detached)
3424.asterisk (Detached)
5024.ASTlisten (Detached)
5021.ASTsend (Detached)
3320.astshell (Detached)
5027.ASTVDauto (Detached)
3294.ASTVDadapt (Detached)
8 Sockets in /var/run/screen/S-root.

[root@vici ~]#


I will be formatting the server but Before that would Like to know , if any application or change of script done by hackers ?

[gardo]

These are from Romania:

79.119.36.218
79.119.39.176

There really is no easy way to check what files have been modified on your server. If you want a clean start I'd recommend reinstalling the system. Make sure you backup your Vicidial data first. Go download the latest GoAutoDial. VicidialNOW is outdate.