> No question, reinstall. I agree, this is a root exploit, and once you have root you can pretty much hide anything you want. On a side note, the patch even applies cleanly on older versions of exim (such as 4.63), so if you're stuck with an older exim for whatever reason (like I am), its easy enough to patch. Cheers, Izak