was i hacked again???

[mandreko]

my root password was changed, and lilo was set to no delay (that's the biggy)

my /var/log dir had nothing in it

there were 3 new users on my system... cgi, mdmail, and mail... are these normal users? or are they part of linux?

i'm thinking i'm going to reinstall... but i'm not quite sure...

[Wonock]

Sounds like you've been craked ... have you installed any software recently that added added to the system that would add any new users. If your root password was changed and it wasn't you then you've defenatly been craked :-P. What security mesuares and distro do you use?

Wonock

[fod]

Set up a firewall... www.pmfirewall.com (http://www.pmfirewall.com)