是不是有后门了，怎么出现这个情况，如何处理？？

wgedu

系统日志如下，重启也不行，还是出现如下日志：：
Fri Aug  8 16:38:46 2014 daemon.info arpwatch: bogon 0.0.0.0 0:14:49:a3:af:a9
Fri Aug  8 16:39:18 2014 daemon.info arpwatch: bogon 0.0.0.0 0:14:49:a3:af:a9
Fri Aug  8 16:39:50 2014 daemon.info arpwatch: bogon 0.0.0.0 0:14:49:a3:af:a9
Fri Aug  8 16:40:01 2014 cron.info crond[2287]: crond: USER root pid 15654 cmd /root/autodetect
Fri Aug  8 16:40:01 2014 cron.info crond[2287]: crond: USER root pid 15655 cmd /root/ddns.sh
Fri Aug  8 16:40:22 2014 daemon.info arpwatch: bogon 0.0.0.0 0:14:49:a3:af:a9
Fri Aug  8 16:40:54 2014 daemon.info arpwatch: bogon 0.0.0.0 0:14:49:a3:af:a9
Fri Aug  8 16:41:28 2014 daemon.info arpwatch: bogon 0.0.0.0 0:14:49:a3:af:a9
Fri Aug  8 16:42:00 2014 daemon.info arpwatch: bogon 0.0.0.0 0:14:49:a3:af:a9
Fri Aug  8 16:42:01 2014 cron.info crond[2287]: crond: USER root pid 15668 cmd /root/autodetect
Fri Aug  8 16:42:32 2014 daemon.info arpwatch: bogon 0.0.0.0 0:14:49:a3:af:a9
Fri Aug  8 16:43:04 2014 daemon.info arpwatch: bogon 0.0.0.0 0:14:49:a3:af:a9
Fri Aug  8 16:43:36 2014 daemon.info arpwatch: bogon 0.0.0.0 0:14:49:a3:af:a9
Fri Aug  8 16:44:01 2014 cron.info crond[2287]: crond: USER root pid 15678 cmd /root/autodetect
Fri Aug  8 16:44:08 2014 daemon.info arpwatch: bogon 0.0.0.0 0:14:49:a3:af:a9
Fri Aug  8 16:44:10 2014 user.notice ddns-scripts-myddns: Running IP check ...
Fri Aug  8 16:44:40 2014 daemon.info arpwatch: bogon 0.0.0.0 0:14:49:a3:af:a9
Fri Aug  8 16:45:12 2014 daemon.info arpwatch: bogon 0.0.0.0 0:14:49:a3:af:a9
Fri Aug  8 16:45:44 2014 daemon.info arpwatch: bogon 0.0.0.0 0:14:49:a3:af:a9
Fri Aug  8 16:46:01 2014 cron.info crond[2287]: crond: USER root pid 15701 cmd /root/autodetect
Fri Aug  8 16:46:16 2014 daemon.info arpwatch: bogon 0.0.0.0 0:14:49:a3:af:a9
Fri Aug  8 16:46:48 2014 daemon.info arpwatch: bogon 0.0.0.0 0:14:49:a3:af:a9