[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 266
  • Last Modified:

Is there a log created by OS when a directory is deleted in Windows 2000 Professional?

One of my directories has been deleted.  I am the only one with access to this computer so I am assuming some type of virus, etc.  Is there a log created by OS when a directory is deleted in Windows 2000 Professional?
1 Solution
As far as I know, Win2k generates no specific file/directory deletion log unless the deletion is done by an application that itself generates a log or it is due to a system error that is recorded in the system log.

You should take a look at the system, software, security and any other logs - accessible via the Event Viewer.  There are scenarios where the system is updating a directory entry at the moment of a system crash or power failure, leaving the directory entry damaged and inaccessible.  This sort of thing doesn't happen very often, but it should create a set of lost clusters that may be identifiable via chkdsk or other drive-verification tools.

As far as looking for your lost data, the most rudimentary tool is looking in the Recycle Bin - it would only be there it it was explicitly deleted by the OS.
Next is to run some file system diagnostics - I would not run them in 'repair' mode, just in 'diagnose' mode to see if something is there - e.g., chkdsk w/o the '/f' switch (fix errors)
Beyond that you are looking at propietary or open source data recovery software such as Ontrack (http://www.ontrackdatarecovery.com/hard-drive-recovery/) and any of the 'free' (and not-so-free) tools that can be found via a Google search.


Featured Post


Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now