Find Hidden Script

[Barry Brimer]

> I am currently trying to track down a script that is run on one of our
> redhat machines which was put in place by someone no longer in the company.
> The script basically runs a remove on a temp area but we now want to stop
> it doing this but unfortunately I cannot see it in any crons on the
> machine. I have looked at all the logical account for the crons to be
> running under but have had no luck. Does anyone know a good way of finding
> out who and where on the machine it is running from.

Have you looked at /etc/cron.daily/tmpwatch ??