[cobalt-users] Hackers File?

["Cobalt" <wylim@xxxxxxxxxxx>]

Hi everyone,

Below are the files that exist in my RaQ3 /var/log directory. There are 6
files which I find suspicious.
boot.log,  sendmail.st, spooler, lastlog,  xferlog & xferlog.1
Are these files suppose to be there?
I deleted sendmail.st yesterday but now its back again.
lastlog was empty when I use vi to see the file.

Regards
Johnson

[admin@www admin]$ cd /var/log
[admin@www log]$ ls -al
total 3518
drwxr-xr-x   3 root     root         1024 Mar  7 12:31 .
drwxr-xr-x  18 root     root         1024 Mar  5 12:00 ..
-rw-r--r--   1 root     root            0 Feb 27 19:47 boot.log
-rw-r--r--   1 root     root       211366 Mar  7 13:01 cron
-rw-r--r--   1 root     root         4085 Mar  5 12:00 dmesg
lrwxrwxrwx   1 root     root           15 Feb 28 03:44 httpd ->
/home/log/httpd
-rw-r--r--   1 root     root        32412 Mar  7 13:02 lastlog
-rw-------   1 root     root      1573518 Mar  7 13:02 maillog
-rw-------   1 root     root       169609 Mar  7 04:06 maillog.1.gz
-rw-------   1 root     root       579300 Mar  7 13:02 messages
-rw-------   1 root     root       140992 Mar  3 03:59 messages.1.gz
-rw-r--r--   1 root     root         1484 Feb 27 19:07 mgetty.log.ttyS0
drwxr-xr-x   2 root     root         1024 Jul 22  1999 samba
-rw-------   1 root     root       746703 Mar  7 13:02 secure
-rw-------   1 root     root       141400 Mar  6 04:00 secure.1.gz
-rw-r--r--   1 root     root          616 Mar  7 13:02 sendmail.st
-rw-------   1 root     root            0 Feb 28 03:42 spooler
-rw-r--r--   1 root     nobody          0 Mar  7 04:03 xferlog
-rw-r--r--   1 root     nobody          0 Mar  6 04:03 xferlog.1