Hey,
I've found randomly places files named .tmpsu, .dbsu, .handlersu files.
They're all over the place (DCIM, Pictures, etc.) and each dir has only one file.
My phone isn't rooted and the bootloader is locked, and the only time it left my sight for long enough to be hacked was the warrenty...