Information Deleted from Shared Drive
Posted on 2006-05-22
What a Monday. I just installed a Windows 2003 server on 5/13/2006 out in my other office and I'm using Symantec Backup Exec. I was running differential backups until Friday 5/19/2006 when I set it to run full backups instead. It ran a full back up at 11pm on Friday the 19th and then between that and Saturday night, it seems 95% of the files in that shared drive that Symantec is backing up went missing. I also seem to have an odd number of pings coming in on port 445. My firewall appears to be blocking them.
I was able to restore the files from my backup on Friday.
Can anyone please let me know where to go to find out why they were deleted and what to check to see if someone had gotten in to my network?
I very much appreciate any help you can give me.
Thank you so much!