I have a bunch of lines in my machine if I use ps aux. Here are the lines:samp      8413  0.0  0.0    968   564 ?        S    12:28   0:00 ./ssh 150samp      8419  0.0  0.0    956   380 ?        S    12:28   0:00 ./ssh 150samp      8420  0.0  0.0    956   380 ?        S    12:28   0:00 ./ssh 150samp      8421  0.0  0.0    956   384 ?        S    12:28   0:00 ./ssh 150samp      8422  0.0  0.0    956   384 ?        S    12:28   0:00 ./ssh 150samp      8423  0.0  0.0    956   396 ?        S    12:28   0:00 ./ssh 150samp      8424  0.0  0.0    956   384 ?        S    12:28   0:00 ./ssh 150Just a few out of hundreds. I don't know what ./ssh 150 is or what it does, but I know it shouldn't be there. Or am I wrong?Edit: All my logins are fine under root. However, under samp, I have weird lines:samp     pts/1        quannei.de       Wed Jan 29 07:59 - 08:01  (00:01)samp     pts/0        go2tech.de       Sat Jan 11 11:24 - 11:24  (00:00)
Has my machine been compromised?
security
This probably isn't a real ssh command:./ssh 150Since A) ./ means in the current working directory, and B) 150 is unlikely to be a valid hostname (I haven't tried a plain number as an /etc/hosts alias however).  It looks more like someone has a script/executable called ssh somewhere that does who knows what.  Out of curiousity I did a quick search online for the exact phrase ssh 150 and look what turned up as the ONLY hit (scroll through the text of the ssh-scan script there)! I'd be mighty suspicious at this point...