chkrootkit -- locally checks for signs of a rootkit also check /var/log/secure for any successful connections from IP addresses you do not know.
__________________ SplatNIX IT Services :: Innovation through Collaboration™  http://www.messagefortress.com |