Hello List, here are my question again. Possible anyone can explain me this behavior of suse-seccheck. I have run chkrootkit und some other test and I don't believe that is a trojan or worm. A `find / -name "."` found nothing. Pherhaps someone have the same output??? Thank's Mario <snip> Weekly security check v2.0 by Marc Heuse <marc@suse.de> . . . Changes in your weekly security configuration of xxxxxx: The following files are suid/sgid: - drwxr-x--- 2 root root 4096 2003-03-11 19:55 . + drwx------ 17 root root 4096 2003-03-22 21:09 . The following program executables are group/world writeable: - drwxr-x--- 2 root root 4096 2003-03-11 19:55 . + drwx------ 17 root root 4096 2003-03-22 21:09 . The following devices were added: - drwxr-x--- root root 4096 Mar + drwx------ root root 4096 Mar <snap>