On Fri, May 29, 2015 at 3:41 PM, Ralf Mardorf <ralf.mardorf@xxxxxxxxxxxxxx> wrote: > [rocketmouse@archlinux ~]$ ls -hAld /etc/fonts/* > drwxr-xr-x 2 root root 4.0K May 28 21:51 /etc/fonts/conf.avail > drwxr-xr-x 2 root root 4.0K May 19 03:19 /etc/fonts/conf.d > -rw-r--r-- 1 root root 5.4K Mar 24 2014 /etc/fonts/fonts.conf > -rw-r--r-- 1 root root 7.1K Mar 24 2014 /etc/fonts/fonts.dtd > drwxr-xr-x 4 root root 4.0K Jun 29 2013 /etc/fonts/infinality > > I can't see anything related in > /etc/fonts/fonts.conf, /etc/fonts/conf.d/50-user.conf, > /etc/fonts/conf.avail/51-local.conf, /etc/fonts/conf.avail/50-user.conf > > What ever I check, e.g > [rocketmouse@archlinux ~]$ grep encod .claws-mail/folderlist.xml > <?xml version="1.0" encoding="UTF-8"?> > or lightdm.conf etc., I can't find something unusual. Note that FontConfig configuration files are actually XML files with extension .conf. Did you look inside all these files? And there are likely other examples of hidden XML files (not related to FC) without the .xml extension. That's why I suggested the commands: $ grep -ir 'encoding="utf8' /etc That will look recursively for any file with the suspicious text.