Solved

Deleted AFD.sys file from NT 4.0 Workstation. Why?

Posted on 2001-09-13
7
176 Views
Last Modified: 2006-11-17
I've had this happen twice now within a couple of months.  One of our external laptop users called and couldn't get onto the network so we took a look at his machine.  There was an error 7000:

"The AFD Networking Supoport Environment service failed to start due to the following error: The system cannot find the file specified."

The file AFD.sys was missing from the c:\winnt\system32\drivers directory. I replaced the file and it works fine.  

My question is what would cause this file to be deleted?  We use a Winnt domain and the users connect with cable to our VPN.  Any ideas?

Thanks,

Derek.
0
Comment
Question by:dgwest
  • 4
  • 3
7 Comments
 
LVL 41

Expert Comment

by:stevenlewis
ID: 6480215
My first thought would be users
the second virus/trojans
0
 

Author Comment

by:dgwest
ID: 6480244
The users say they didn't do it. There really is no reason to delete that file.  As far as viruses go, the computers get updated to the latest stuff when they log onto the network. It's possible but I doubt it.
0
 
LVL 41

Expert Comment

by:stevenlewis
ID: 6480272
I'm just guessing here
the users kids?
Nothing personal againt the user, but end users are mistaken sometimes
I know there is no reason to delete the file, but.....
If it is a one time occurance, you might never know, but if it repeats it self, then you can try and track down what is causing it
0
How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

 

Author Comment

by:dgwest
ID: 6480279
It's happened to 2 different users.
0
 
LVL 41

Accepted Solution

by:
stevenlewis earned 50 total points
ID: 6480369
enable monitoring on the file access, deletion, etc and see what event viewer reports
0
 
LVL 41

Expert Comment

by:stevenlewis
ID: 6639066
So how was it being deleted?
0
 

Author Comment

by:dgwest
ID: 6641798
I have no idea.  It hasn't happened since.  I was just clearing up some outstanding questions I've asked and you gave me some ideas.

Derek.
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Join & Write a Comment

Meet the world's only “Transparent Cloud™” from Superb Internet Corporation. Now, you can experience firsthand a cloud platform that consistently outperforms Amazon Web Services (AWS), IBM’s Softlayer, and Microsoft’s Azure when it comes to CPU and …
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now