Well for part of your question you can use rootkithunter (http://rkhunter.sourceforge.net).

Google hardening <your distro> should give a lot of info on best practices.