On 06/27/2015 10:12 AM, Michael Stauber wrote: > Hi Gerald, > >> Server 5106R >> cfsadmin > Out of curiosity? What's "cfsadmin"? > > caching file system admin ??? turns out the actual executable appears to have been /usr/bin/host 'top' indicated cfsadmin. I suspect the server is hacked, although the cfsadmin file looks OK?