[cobalt-users] "Sort of" hacked?? Raq3 with some problems...

[Cobalt Newbie <xtraprss@xxxxxxxxxxxxx>]

Ok, checking my files against those found in other posts, I've discovered 
that while my login, ls, netstat,  ps, du and find commands seem to be "new 
and unproved," others appear untainted (checked via Md5 checksums)

I also don't seem to have all the xlogin, ld.so.hash, crth.o, etc files, 
BUT I have come across the directory (empty):

usr/src/.puta

This was mentioned by Rik Thomas in an earlier message (2/9). What else 
should I be looking for?

Should I replace my tainted files with those found in the unhack.tar.gz 
mentioned here earlier, or....?

Any help would be greatly appreciated. Thanks!