For awhile now the Cron Daemon emails have been containing a line saying:
Does anyone know what this is? The whole recent episode with that trojan has me a little jumpy. I cannot find 'xfs' anywhere either, so I'm not even sure what's generating this. Any perspective is welcome.passwd: Unknown user name 'xfs'