Recently I noticed my hdd running wild when I wasn't really doing anything drive intensive. So I fired up top in a shell and found a user called "nobody" running "find." Who the heck is that? What the heck are we finding??

I'm running knoppix-installered to hdd and created no such user. Have I been hacked??? I panicked, opening a root sheel, killed that process and userdeled nobody. Was that a good thing, or did I over react? I never noticed user nobody in top before....

BTW, if I was hacked, did I do the right thing? My PC was running really slowly before I removed that process and user. Is there anything else I should do in this instance or to protect my PC against future attacks?

TIA,
AJG