Thread: Help I've been hacked I think?

hi all,
think have been hacked. have been having problems program loading , when start computer boots sub routine loads version of ubuntu limited options. of sudden switch on regular desktop environment. in log file found this:

bruce rtkit-daemon[1182]: made thread 1601 of process 1601 (n/a) owned '1000' high priority @ nice level -11.
jun 26 09:07:40 bruce rtkit-daemon[1182]: supervising 4 threads of 2 processes of 2 users.
jun 26 09:07:40 bruce rtkit-daemon[1182]: made thread 1602 of process 1601 (n/a) owned '1000' rt @ priority 5.
jun 26 09:07:40 bruce rtkit-daemon[1182]: supervising 5 threads of 2 processes of 2 users.
jun 26 09:07:41 bruce rtkit-daemon[1182]: made thread 1603 of process 1601 (n/a) owned '1000' rt @ priority 5.
jun 26 09:07:41 bruce rtkit-daemon[1182]: supervising 6 threads of 2 processes of 2 users.
jun 26 09:17:01 bruce cron[1913]: (root) cmd ( cd / && run-parts --report /etc/cron.hourly)

, this:

bruce rsyslogd: [origin software="rsyslogd" swversion="4.6.4" x-pid="433" x-info="http://www.rsyslog.com"] exiting on signal 15.
jun 29 07:11:46 bruce kernel: imklog 4.6.4, log source = /proc/kmsg started.
jun 29 07:11:46 bruce rsyslogd: [origin software="rsyslogd" swversion="4.6.4" x-pid="409" x-info="http://www.rsyslog.com"] (re)start
jun 29 07:11:47 bruce rsyslogd: rsyslogd's groupid changed 103
jun 29 07:11:47 bruce rsyslogd: rsyslogd's userid changed 101
jun 29 07:11:46 bruce rsyslogd-2039: no open output pipe '/dev/xconsole' [try http://www.rsyslog.com/e/2039 ]
jun 29 07:11:47 bruce kernel: [ 0.000000] initializing cgroup subsys cpuset
jun 29 07:11:47 bruce kernel: [ 0.000000] initializing cgroup subsys cpu
jun 29 07:11:47 bruce kernel: [ 0.000000] linux version 2.6.38-8-generic (buildd@vernadsky) (gcc version 4.5.2 (ubuntu/linaro 4.5.2-8ubuntu3) ) #42-ubuntu smp mon apr 11 03:31:50 utc 2011 (ubuntu 2.6.38-8.42-generic 2.6.38.2)
jun 2

these system log 01 , wondering if 1 have @ full system log 01,the boot log , auth log. whaer should post these quite large.

appreciated running ubuntu 11.04

check /etc/passwd , /etc/group file match uid , gids. possible have multiple users using 1 of these uid or gid.

daemons specified part of normal operation. don't see obvious in these logs.

Forum The Ubuntu Forum Community Ubuntu Specialised Support Security [ubuntu] Help I've been hacked I think?

Ubuntu