Boot off a liveCD (Knoppix, Ubuntu, etc.) and run chkrootkit using the "-r" option. Make it a really, really recent liveCD. -- Carl Fink carl@fink.to If you attempt to fix something that isn't broken, it will be. -Bruce Tognazzini