Do you have Auditing setup? Check the security log.

I would seriously consider the box has been compromised some how.

John Tolmachoff MCSE CSSA
Engineer/Consultant
eServices For You
www.eservicesforyou.com

> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:Declude.Virus-
> [EMAIL PROTECTED] On Behalf Of Grant Griffith
> Sent: Friday, June 06, 2003 5:46 AM
> To: [EMAIL PROTECTED]
> Subject: RE: [Declude.Virus] OT: Scheduler Problems...
> 
> Just an update on this, it appears other files have disappeared also.  FTP
> no longer works either.  Sounds like some files were deleted some how.
Does
> this mean I might have to recover from a backup?  Any other ideas on
> recovering these files that have disappeared?
> 
> Thanks All...
> 
> Sincerely,
> Grant Griffith, Vice President
> EI8HT LEGS Web Management Co., Inc.
> http://www.getafreewebsite.com
> 877-483-3393
> 
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Grant Griffith
> Sent: Friday, June 06, 2003 7:26 AM
> To: [EMAIL PROTECTED]
> Subject: [Declude.Virus] OT: Scheduler Problems...
> 
> 
> Hello All,
> 
> All of a sudden, my NT Scheduler is not working, therefore I am not
getting
> any updates for viruses and things.  When I try to start the scheduler
from
> the services area, I get an error saying "the system can not find the file
> specified".  Anyone know where I can get this file for NT 4.0 SP6a?  Also
> what might of happened to this file?  It was working fine just a couple of
> days ago....
> 
> Thanks!
> 
> Sincerely,
> Grant Griffith, Vice President
> EI8HT LEGS Web Management Co., Inc.
> http://www.getafreewebsite.com
> 877-483-3393
> 
> ---
> [This E-mail was scanned for viruses by Declude Virus
> (http://www.declude.com)]
> 
> ---
> This E-mail came from the Declude.Virus mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus".    The archives can be found
> at http://www.mail-archive.com.
> 
> ---
> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
> 
> ---
> This E-mail came from the Declude.Virus mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus".    The archives can be found
> at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.

Reply via email to