first, you should lock in your logs, situated in /var/logs/. Check the deamon or messages. Then, try "last" command to see who's on your box and who's still in The last but not the least, maybe this could you help to give away any doubts: www.chkrootkit.org. download and install it. then run the command: ./chkrootkit
best regards Jinxi Cheng <[EMAIL PROTECTED]> wrote: HI, I recently installed openbsd and 2 days back openbsd shutdown byitself. Probably a system crash. I hope it is not some one that has rooted the box and shut it down. Is there any tool to scan the system to see if it is rooted or not? best regards -- Jinxi Cheng, Bring photos to life! New PhotoMail makes sharing a breeze.