hallo every one...

i need some advice and tips...

i have a web server now in the last couple of days i weant in into my conrol panel and i sow that the server load is on 2.7
usualy it is on 0.8 or 0.9
now.... i didnt touch it this couple of days...
i think ive been hacked...
i need some tips which kind of commands can i run to check it out and be sure of it.....
which kind of free programs can i install in the process which can help me with my strugle to fix my machine

can you remaind me whats the command to watch all runing proseces?
i forgot it right now.... lol

so any how i would love to get any help you can give.... or any tips....

thanks

ps aux should give you a listing of all current processes, while the top command will display the most cpu intensive tasks. Keep in mind that if your system has been compromised then either or both of these commands could be trojaned and may not give you an accurate listing. I'd highly recommend running chkrootkit or rootkit hunter which will compare the ps listing to the process info in /proc. They both perform numerous other checks, like searching for common rootkits, sniffers, bindshells, etc. Also keep in mind that numerous things can cause the load to spike and have nothing to do with getting compromised.