Hacked CentOS 5 server - possible rootkit installed?
I am running CentOS 5.3 and here is the result of "chkrootkit":
I don't understand what the warnings mean.
Possible t0rn v8 \(or variation\) rootkit installed
Warning: Possible Showtee Rootkit installed
Warning: `//root/.mysql_history' file size is zero
INFECTED (PORTS: 465)
You have 61 process hidden for readdir command
You have 62 process hidden for ps command
chkproc: Warning: Possible LKM Trojan installed
The tty of the following user process(es) were not found
in /var/run/utmp !
! RUID PID TTY CMD
! root 3040 tty2 /sbin/mingetty tty2
! root 3041 tty3 /sbin/mingetty tty3
! root 3042 tty4 /sbin/mingetty tty4
! root 3043 tty5 /sbin/mingetty tty5
! root 3046 tty6 /sbin/mingetty tty6
Is the server infected or in danger?