<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type"> </head> <body bgcolor="#ffffff" text="#000000"> meaning that they did gain root access after all but were able to hide this through a rootkit??? /Håkan Jan Schaefer wrote: <blockquote cite="mid1114602297.4678.11.camel@legolas.imise.uni-leipzig.de" type="cite"> <pre wrap="">Hi, </pre> <blockquote type="cite"> <pre wrap="">My question is: They did not guess the root password, how did they manipulate files which are only writable by root??? </pre> </blockquote> <pre wrap=""> The following articles at wikipedia should give you an idea what was going on on your maschine: <a class="moz-txt-link-freetext" href="http://en.wikipedia.org/wiki/Exploit_%28computer_security%29">http://en.wikipedia.org/wiki/Exploit_%28computer_security%29</a> <a class="moz-txt-link-freetext" href="http://en.wikipedia.org/wiki/Rootkit">http://en.wikipedia.org/wiki/Rootkit</a> Hope that helps, Jan P.S. I would recommend an clean re-install. You never know what things are sleeping and hiding on your maschine now... </pre> </blockquote> </body> </html>