On Mon, 24 May 2004 09:53:45 -0500, "Benjamin J. Weiss" <benjamin@xxxxxxxxxx> wrote: > >I don't think that this is a trojan, just a design issue with gnome. Thanks for checking. I'll sleep better. At the same time this happened, the logwatch was reporting bad records in the httpd log. They look like someone was trying some sort of buffer overflow attack. My worry was that someone had pushed a rootkit through an so-far unknown overflow in Apache. -- Steve