[CentOS] I appear to be attacking others

> That looks like the ftp scanner which can be found at
> <http://wayreth.eu.org/> - somebody is probably using your box to find
> insecure ftp servers for sharing files.
> 
> Can you do an "ls -lah /dev/shm/..\ /"?
> 
> Ralph

Besides killing what's running, how do I get this all cleaned up? 

The hotmail account has been denied logins now. I've also set a new
password on the account.

Thanks,
James