Anyway, it doesn't really matter at this point as I've learned enough to know it wasn't an authorized use of the server, and removed the offending directory. I am not a full time system administrator, but I do know enough about how it works to get by.

SDR