Not sure that these are viruses. I think they are part of a root-kit
that scans the internet for ssh servers that have bad passwords. I
would consider your RH box to have been compromised somehow until
proven otherwise. The usual suspects would be:

a) the box has guesable passwords that the ssh aut...

[ more ]