someone got into my linux box and installed a process which does a port scan periodically.
I stopped the port scan with an ip-chain command. I cannot find the infected binary or process however.

Does anyone have advice on this issue?

thank you
mike