-
Mysterious open ports, strange processes.
-
System utilities (common commands) behaving strange.
-
Login problems.
-
Unexplained bandwidth usage.
-
Damaged or missing log files, syslog daemon behaving
strange.
-
Interfaces in unusual modes.
-
Unexpectedly modified configuration files.
-
Strange entries in shell history files.
-
Unidentified temporary files.