Maybe I should add that after 9 weeks of suspension I have only just (5 days ago) been told of this 'find' and have been given a date of 5 days time to attend a disciplinary hearing to answer the charges so to speak.
I am going to insist that the matter be deferred until an examination of the hard drive is done or they actually prove that it was me that 'sent' the e mails- which I know I didn't do- which is why I asked if it was possible to be Trojan / virus/ piggyback activity.