Hi, my system is SuSE 7.2. i was shocked today when i saw a file in my homedir called MDACSET.log. It's content is : ------- Lets get out of here. 2.1 already instlled. ------ In my /var/log/messages i could read --- Sep 4 15:55:42 pam proftpd[4981]: pam.[mydomain] (pD9E2C451.dip.t-dialin.net[217.226.196.81]) - Complex path, will rename /.in.MDACSET.log. to /MDACSET.log. --- is this a backdoor or something or just a file from a windows system which was ftped onto my server ? _I_ never puhsed this file up... thanks a lot Gero _______________________________________________________________________ 1.000.000 DM gewinnen - kostenlos tippen - http://millionenklick.web.de IhrName@web.de, 8MB Speicher, Verschluesselung - http://freemail.web.de