On 26 Jul 2009, at 18:37, Steve Davis wrote: > No idea on the exploit, or how the box has been compromised. This > new box had no domains on it nor any web sites. So what makes you think it has been? What are the traits of the hack. i.e. what is actually wrong..