RE: [cobalt-users] last bit of hacker droppings.

["Tony" <isplists@xxxxxxxxxxxx>]

+That's the same thing the bastards did on mine.
+
+Assuming you have su'ed to root, just issue 'crontab -e', scroll
+down to the
+offending line (ie the last line), press the 'x' key a few times to remove
+it, and hit Shift-ZZ to save.
+
+Cheers...
+Roger

Thanks Roger, that did it. Did your hacker do anything to divert admin mail?

I had a forward set through the gui and it doesnt work anymore.
Killed that and put a procmailrc in for admin and still doesn't work.
Maillog says the message is queued but then I can retreive it via Pine.

Tony