kill -9 the process, and track down the binary using find Hopefully its an innocent user, but may be worth doing some chkrootkit checks aswell just to be safe. Regards, Andy andy@xxxxxxxxxx http://www.raqpak.com <-- Unofficial FAQs and PKGs