I found this in my history file on a machine that I play around with when I decide to try and learn Linux. (sleep 300 ; killall -9 uh) w ./uh 0 212.38.131.178 1 65535 /dev/null & I am pretty much a perpetual newbie. ( I do not do this for a living) I know this systems been compromised. Short of reformatting the hard drive I am not to sure what to do. Any help would be appreciated. Joseph josephj at mninter.net