Le mer 06/02/2008 à 13:00, Ric Moore a écrit : > On Mon, 2008-02-04 at 16:16 -0800, Rick Stevens wrote: > > > > Try "top" first and see if that shows it. If you got rootkitted, then > > it may not show the guilty process. Go fetch a copy of ckrootkit and > > run it: > > > > http://www.chkrootkit.org/ > > > > I did that and got this: > Searching for anomalies in shell history files... Warning: `' is linked > to another file > > Wazzat? Ric I haven't had a chance to run chkrootkit yet. Sorry don't have an answer. With help from this list I found the program apparently causing my problems. The problems start and stop as that program is started and stopped on each machine. A comparison with "cmp" shows the offending programs are identical to the one on the installation CD. I've notified the manufacturer and sent them a copy of the program. I'm not very knowledgeable about computers, even if I use them a lot. Hopefully someone else will answer before you have to rely on me. :-) But "linked" sounds like a symbolic (soft) or hard link created with the "ln" command. The soft link means the file is really in another directory, and if a hard link, under another name. You can see symbolic links with "ls -F" as @ is appended to the filename. You can see where a symbolic link points with "readlink linkname". Doug
