yes, he´s in "town" since 12 month! comming in with "postmaster"-accounts or popper on my old (suse5.3) system! bye k. you:-> Hi! you:-> Maybe, you should scan your /etc/passwd for a user called "Malk" and/or "Malk2" you:-> which has uid:gid 0:0 but no password! you:-> I found this user on four independent systems I'm managing. It came along with you:-> a new directory inside /dev which contained some tools to hack the system, hide you:-> tasks/files in ps/ls and some more! you:-> bye, you:-> Sebastian