All the files seem to be multiple copies of the same few images, they all seem to be images of our company logo and stuff like that - stuff that would be on the site in various places - so its unlikely its evidence of an attack on the server.

I ran into something similar that turned out to be caused by my use of wvWare to parse the contents of .doc files. In my case the wvWare versions default setting was to extract any images within the document and drop a copy of it in the directory the parser was called from, adding a --nographics arg to the command stopped the image extraction. Obviously they all had the Zope instances UID and Group because Zope was the one calling the parser. Lee _________________________________________________________________ The new MSN 8: advanced junk mail protection and 2 months FREE* http://join.msn.com/?page=dept/bcomm&pgmarket=en-ca&RU=http%3a%2f%2fjoin.msn...