hacked

[Vidiot]

>I can delete everything in the 2 directories, and edit/change the 
>php.php file to empty it out because it was a php script that allowed 
>someone to do anything on the server they wanted, but I can not for 
>the life of me delete them.  I thought maybe they replaced the 
>/bin/rm file, but it does not appear to be a hacked "rm".

Run lsattr on the files.  You might have to use chattr to allow you to
delete them.

No clue on the other stuff.

MB
-- 
e-mail: vidiot at vidiot.com                                /~\ The ASCII
                                                         \ / Ribbon Campaign
[So it's true, scythe matters.  Willow  5/12/03]          X  Against
Visit - URL: http://vidiot.com/                          / \ HTML Email