We've pretty much cleaned up the mess that the n00b hacker left behind. It is funny really, he used a script to exploit his way in through the webserver and then proceeded to try and download another tool to screw the system up. The command log was filled with a lot of help requests on simple Linux commands and command line options. These are things a real hacker should know. I guess script kiddies are all that's left out there these days. :)
