How did rootkit get into a linux box usually? Via a poorly secured telnet? You cannot install a program into a linux server without shell access, right? (unless there are bugs in the daemons providing services) -- .~. http://toylet.homeip.net / v \ Linux 2.4.26 /( _ )\ 11:52pm up 12 days 1:15 ^ ^ load average: 1.00 1.01 1.04 -- Scanned by ClamAv - http://www.clamav.net