[cobalt-users] HELP! Have I been hacked??

[Cobalt Newbie <mfahy@xxxxxxxxx>]

I have a bad feeling I've been hacked (on a RAQ3), and now strange things 
show up when I type ps -aux. I don't recall seeing anything like the 
following entries before, but I HAVE just installed the Bind updates, etc. 
Any chance these are normal entries? If not, what next? (scraping the 
machine and starting over may not be feasible, but...)?

Here's what I'm worried about in the ps output:

root     16825 80.7  0.2  1088   364  ?  R N 12:48  22:40 ./pscan 60.119 53
root     23754  0.0  0.3  1100   388  ?  S N 04:50   0:00 tail -f bindname.log


Thanks, everybody!