Hi You should start by doing reverse dns on select log snippets.... Try and get something you can give to cert to see if it tallys with any current incidents, but, apart from that, drop a line to cobalt - or better, phone the netherlands and ask for a cobalt restore disk Cheers + good luck Adam Beaumont