How to determined which rootkit is using?

[happynbsl <happynbsl () YAHOO COM>]

Hi All:
    I just found my server(RH 6.2 zoot)'s port 54321 is open, and telnet
localhost 54321 show:
    SSH.....

    I think someone have put rootkit in my server.am i right?

    Then How can i determined which kind of rootkit it is using?and How to
clear them?


    any suggestion is quite appreciated!
TIA
Mark


_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com