Have I been hacked? Shadow file deleted

[STYMA, ROBERT E (ROBERT)]

> 
> Hello,
> 
> I installed a new server on Tuesday using Fedora Core 4 and 
> today the shadow
> file was deleted three times. Since nothing was being done on 
> the box at
> those times, I believe I was hacked.
> 
Since it is a new install, I would look into running the
badblocks command just to be safe.  There is always the chance
something is wrong with the disk where the inode for the shadow
file is stored.  This is a long shot, but easy to do.

Bob Styma