Yes. Original intrusion occured on 7 Aug. > So you have pinpointed the exact time of first attack? You should look out > for backups, the person may have been in your system for quite a period of > time before notifying you that they were there. > Zach