So a check of the system [ Ubuntu ] shows

root@b:~# w
17:42:32 up 103 days, 17:17, 1 user, load average: 797.16, 717.44, 667.19

You don't normally see load averages that high. There were about 1600 processes running /etc/ppp/ /.legend/update

root@b:/etc/ppp/ /.legend# ls -la
total 306804
drwxr-xr-x 2 root root 4096 Nov 17 18:48 .
drwxr-xr-x 3 root root 4096 Nov 17 16:54 ..
-rwxr-xr-x 1 root root 1349 Jul 25 23:29 check
-rwxr-xr-x 1 root root 453972 May 28 14:52 class
-rwxr-xr-x 1 root root 75 Jul 25 23:30 clean
-rwxr-xr-x 1 root root 46023449 Jul 25 09:14 full
-rwxr-xr-x 1 root root 266055035 Oct 19 14:39 mfu.txt
-rwxr-xr-x 1 root root 172 Jul 25 23:29 party
-rwxrwxrwx 1 root root 747533 Nov 16 11:42 pass_file
-rwxr-xr-x 1 root root 6206 Jun 1 20:02 timeout
-rwxr-xr-x 1 root root 842736 May 28 14:52 update
-rw-r--r-- 1 root root 0 Nov 17 17:26 vuln.txt

Sound familiar to anyone?

mjb.