server compromised?

hi , i have like these following showing up in my ps,

- r0nin
- bindz
- bd

hmm, im running a rhel and it seems someone is using my server to send spam mails.

i have alot of load going to exim on my server, most seem to be targeting brazil...

any help or advice is greatly appreciated, asap.

thank you.

 

 

 

 

Top