This document is an interesting extract from Real World Linux Security by Bob Toxen that details how to regain control of your system after it has been cracked.