1 - Keep the directory present, but you can safely remove any contents. The way sent PMs were handled has changed.
2 - That sounds like the sticky hack, so that's safe to remove.
3 - That directory and file are leftovers from a failed attempt to bolt on some group based things... they're still used internally for some functions, so don't touch them.