Hello. "From this shell, backup the information to another host if possible (maybe a network file server through NFS/FTP)." What about SSH? "Make sure to startup in single user mode, so no other Trojan processes run after the kernel." How to be sure? http://www.debian.org/doc/manuals/securing-debian-howto/ch-after-compromise.en.html Cheers