Deleted AFD.sys file from NT 4.0 Workstation. Why?

I've had this happen twice now within a couple of months.  One of our external laptop users called and couldn't get onto the network so we took a look at his machine.  There was an error 7000:

"The AFD Networking Supoport Environment service failed to start due to the following error: The system cannot find the file specified."

The file AFD.sys was missing from the c:\winnt\system32\drivers directory. I replaced the file and it works fine.  

My question is what would cause this file to be deleted?  We use a Winnt domain and the users connect with cable to our VPN.  Any ideas?

Thanks,

Derek.
dgwestAsked:
Who is Participating?
 
stevenlewisConnect With a Mentor Commented:
enable monitoring on the file access, deletion, etc and see what event viewer reports
0
 
stevenlewisCommented:
My first thought would be users
the second virus/trojans
0
 
dgwestAuthor Commented:
The users say they didn't do it. There really is no reason to delete that file.  As far as viruses go, the computers get updated to the latest stuff when they log onto the network. It's possible but I doubt it.
0
Improve Your Query Performance Tuning

In this FREE six-day email course, you'll learn from Janis Griffin, Database Performance Evangelist. She'll teach 12 steps that you can use to optimize your queries as much as possible and see measurable results in your work. Get started today!

 
stevenlewisCommented:
I'm just guessing here
the users kids?
Nothing personal againt the user, but end users are mistaken sometimes
I know there is no reason to delete the file, but.....
If it is a one time occurance, you might never know, but if it repeats it self, then you can try and track down what is causing it
0
 
dgwestAuthor Commented:
It's happened to 2 different users.
0
 
stevenlewisCommented:
So how was it being deleted?
0
 
dgwestAuthor Commented:
I have no idea.  It hasn't happened since.  I was just clearing up some outstanding questions I've asked and you gave me some ideas.

Derek.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.