To secure the server from the illegal use, its always better to scan the server once in every week, the following files are basically caused the illegal use of the server to attack other servers like DDoS, spamming, phishing, etc, therefore, run the following command on the shell and remove all the instance you will receive after completing the commands.
locate irc
locate eggdrop
locate bnc
locate BNC
locate ptlink
locate BitchX
locate guardservices
locate psyBNC
locate .rhosts