meaning that they did gain root access after all but were able to
hide
this through a rootkit???
I'm really not an expert on this. But from my understanding, I would say
yes. I recommended a re-install of the complete box, because the
original poster can't be sure, that he has cleaned everthing that was
changed...
Greetings,
Jan
--
PGP: 2814 0DC4 597A 1083 9AA4 6F76 0DD9 54E1 B706 0963