[CentOS] Shadow passwords NOT md5'ed ?

Sat Apr 4 22:26:44 UTC 2009
Michael A. Peters <mpeters at mac.com>

Ralph Angenendt wrote:
> Frédérique Da Luene wrote:
>> Useradd newuser : ok
>> passwd newuser : ok
>>
>> The password is not MD5, only 3DES.
> 
> Again: Have you looked if passwd on your machine is the one from CentOS?
> 

I would suggesting copying the binary to a known clean machine to check 
  the md5sum to verify. If you might have been hacked, you can't check 
the md5 on that box.