I second Mark P and will add that alot of spyware also attempts to contact the web, so check the workstations for "free" internet software Limewire, Gozilla realplayer, etc
Mick -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
