Time: Mon Apr 13 11:36:33 2009 +0430 PID: 4415 Account: nobody Uptime: 25532 seconds Executable: /usr/local/lsws/bin/lshttpd.4.0 Command Line (often faked in exploits): lshttpd