> So any ideas what this could be? This box is behind a firewall and
> there's no way to get to it from the Internet, so I know it hasn't been
> hacked. Also it's the only Linux box on our network, and with me being
> the only person who uses Linux I know someone else hasn't screwed with
> the box.

I've got a feeling it is not the case but check .xsession-errors, for root
in your case. That can grow without you noticing if you have a problem.

Pete


--
http://www.petezilla.co.uk