Installing a rootkithunter is always a good idea , so, lets get one

So open putty ,

log on as “root” and enter your password.

Then you type;

wget ftp://ftp.pangeia.com.br/pub/seg/pac/chkrootkit.tar.gz

Wait for it to stop and then type

tar xvzf chkrootkit.tar.gz

This will unpack it, then type

cd chkrootkit-/

This will take us to right folder, then type

make sense

This will install it and its done.

To run/check for rootkits you open putty, log in as “root” and enter password

then type in

./chkrootkit

This will start the scanner, as it runs, look at screen for any that say “INFECTED”

If your Server/Vps is infected, you can try to replace files with clean ones ,but its best to delete everything and start over since getting rid of them is next to impossible.