If your system has been compromised, back up user data (NOT programs/libraries -- be very sure about this, i.e. inspect your back-ups for suspicious files), reformat, and reinstall from scratch. Unfortunately, this is the only way to safely deal with a compromised system. Meanwhile, if you have a compromised box, pull it off the network immediately. (i.e. disconnect the network cable) since it is a danger to you and to others.
You probably ought to upgrade to something more recent than RH9. If you're running an unpatched RH9 with lots of services available to the Internet ... well, it's not necessarily surprising that you got cracked.