[Monotoko]

Maybe this is what you're looking for?
http://forum.ovh.co.uk/showthread.ph...ackdoor-by-OVH

In my case, there was nothing in /root/.ssh/authorised_users2 except my own key, I'd already locked that down. There was nothing in root's crontab - I have killed the /usr/local/rtm folder and we will see if that's sufficiant.

Regards,
Mono

[mike_]

Just keep in mind disabling this will stop OVH from monitoring your hardware and automatically intervening.

[Wanted]

Maybe this is what you're looking for?
http://forum.ovh.co.uk/showthread.ph...ackdoor-by-OVH

[Monotoko]

I'm trying to secure my server, and I'm wondering how the management console sees my currently running processes when I have locked down SSH and other bits. Is it a kernel module? Is something plugged in?

I've turned monitoring off as when I tried to set up some iptables rules to make it more secure my server got rebooted, so why is it still able to monitor processes and how do I kill it?

Regards,
Mono