On http://www.ucl.ac.uk/ , the website of London's global university, i found a very nice document. The document provides very useful information about what to do when your Unix/Linux server is hacked. Here is the download: Checking UNIX/LINUX Systems for Signs of Compromise Of course i do hope you'll never need it!