>> If you are convinced the system is compromized, copy RAM to a networked > machine using dd | ssh and then power down the box (not shutdown, power > off hard) and create 3 copies of the HD using DD from a bootable distro > onto other drives, clean if possible, but zeroed either way. How would you copy RAM to a networked machine exactly. I'm curious. James