Angelo Bertolli writes: > 2) If you have a hash of all the files (like tripwire provides) on some >media that was NOT compromised, you can check those. You must also boot from uncompromised media. -- John Hasler