trojan found - please help

I got this email from WHM:

Hidden Pid detected! [pid 273]
hidden from ps: [yes]
hidden from kernel: [yes]
binary location: [/sbin/devd]

Hidden Pid detected! [pid 295]
hidden from ps: [yes]
hidden from kernel: [yes]
binary location: [/usr/sbin/syslogd]

Hidden Pid detected! [pid 310]
hidden from ps: [yes]
hidden from kernel: [yes]
binary location: [/usr/sbin/named]

when I ran chkrootkit, I got the following result and then it stopped after that (not sure if it needed more time or not)

Checking `bindshell'... INFECTED (PORTS: 465)
Checking `lkm'... ^C


Please help....

thanks.

 

 

 

 

Top