Mail question

[matsprt]

I'm running a Linux mail/file server using RH 6.1. It has been running for about 17 months trouble free. One of the employees mamaged to get the Klez virus via e-mail. The virus has gone throught the system including the accounting software which resides on another server (an NT server). I want to go into the mail accounts from the Linux side and check the individuals mail for any remainders of this virus. How best to accomplish this ?? The normal Sys Admin is gone for a week and I don't want to wait that long to check. I have root sign on rights. I assume I'll have to go where ?? and edit with vi ??

thks

 

[RhythmAce]

Look in /var/spool/mail/"username". Each user should have a file here with their name. This file will contain all that users mail since it was last popped. The file is text so you can view it with a text editor such as gedit but it will not be formatted in the way you normally see your mail but you should be able to see if there is anything funky in any of them. If you have a lot of users or these files are large, you may want to find a better way to scan them.