Question : Would a hacker install / use avahi if he compromised your machine?

I *think* my machine was compromised, and I have an installation of avahi on my box (service running) that I don't remember installing (or any dependencies installing).

the files in /etc/avahi are dated around the time i think my server was compromised...

what do you guys think?

Answer : Would a hacker install / use avahi if he compromised your machine?

It's possible it was used; Avahi is a tool that is used to discover services used on a local network.  More information here:

http://avahi.org/