I have no experience but my first reaction would be to dump the site to=20 a fresh hard drive. Then I would purge the site and restore it from=20 backup.It will probably be compromised again, but the dump and the=20 backup comparison might yield some clues. On 11/28/2014 7:52 AM, RussellMc wrote: > Any advice welcome. --=20 John Ferrell W8CCW Julian NC 27283 It is better to walk alone, than with a crowd going the wrong direction. --Diane Grant --=20 http://www.piclist.com/techref/piclist PIC/SX FAQ & list archive View/change your membership options at http://mailman.mit.edu/mailman/listinfo/piclist .