I checked the /tmp directory and in it was the following. It looks like 
the /var directory was ok. It looks like what the person was trying to 
do did not succeed. Though I will download the root check programs.

-rw-------    1 www-data www-data       43 Feb 17 17:05 
sess_22a40a0662bb6152c07f3ff9ffe3dea2
-rw-------    1 www-data www-data       43 Feb 17 17:20 
sess_55e6e8570b26e1d31fb9c3a614dec4fe
-rw-------    1 www-data www-data       43 Feb 17 17:01 
sess_9a7eb9e5fd43443ec5e28f3d7e77b8f0
-rw-------    1 www-data www-data       43 Feb 17 17:25 
sess_d6f229587f17500f25043643330a671e
-rw-------    1 root     root     67108864 Feb 17 06:28 
session_mm_apache0.mem
-rw-------    1 root     root            0 Feb 17 06:28 
session_mm_apache0.sem



---------------------------------------------------
PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change  you mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss