On Fri, Nov 16, 2001 at 07:47:57AM -0600, phil at rephil.org wrote:
> I had two mystery processes virtually lock up my laptop for 1/2 hour, 
> (disk thrashing) before deciding that I didn't have anything on the 
> system that should be doing that.  The only clue I got was the names 
> of the processes at the top of "top", and I didn't recognize them.
> 
> Does anyone know what "dcsP43zCr" and "dcsaNhlna" might belong to?  Or 
> should I start tearing apart the firewall and go to DEFCON-5?

It's likely you've been hacked. Take your machine off the network and down
to single-user mode and search for any recently modified files, and any files
named "dcsP43zCr" and "dcsaNhlna".

-- 
Michael