Files Automatically getting deleted

60 pts.
Tags:
Microsoft Windows Server 2003
Microsoft Windows XP
NTFS
Hello, We have an enterprise suite which runs on a client-server model. This uses the native file system to store the database. The server runs on Windows XP and also 2003 Server OS. We have noticed that suddenly some files have started missing. We checked thoroughly using Anti-virus and Anti malware, but the systems seems to be clean. We then ran a data recovery software only to discover that files have been deleted. The database requires read only permission to the clients. My question is how do I prevent files being deleted in the NTFS partition? Thanks Regards Jagdish

Answer Wiki

Thanks. We'll let you know when a new response is added.

Jagdish,,,
Where are these files being missing from please ???? Could you give more details

Is it possible for you to set the “security permission” from the ” Share & Security ” for some specific users and move the ” Full Control” from ” Every one ” user????

Best Wishes

Hello,

These files are missing from the database which resides on the server PC. Now since “Evryone” requires Read-Only permission, do you still advice to work on the security permission? But that would be a “Preventive Measure” Now I have recovered some data. Now the point is how do I find out how these files got “Deleted”?

Thanks

Regards

Jagdish

Discuss This Question: 6  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • carlosdl
    Yes, more details are needed. The first thing you need to find out is who is deleting those files. What type of files are them ? how often are they being deleted ? Is this happening at the server, or at the client side ? Have you checked the antivirus logs ? It could be the antivirus deleting files that it sees as infected or malicious. Also, are you completely sure that the files are not being deleted manually by some user ? You could probably prevent the files from deletion by securing them via NTFS permissions, but I would try to find out who is deleting them, and why. Also, you could enable auditing if needed.
    69,475 pointsBadges:
    report
  • Jagdish
    Well, the thing is we do NOT know how this files are "deleted". It is NOT possible for anyone to intentionally delete them as "Write" and "Modify" permission is given only to one user - administrator The files are flat files. Some of them are plain text while others are binary files. We have not been able to know the frequency of deletion. But it is guessed that this has been happening from quite some time as we checked up the Backup Repository only to fine the scenario being the same there. This is happening on the server side since the database resides on the server We have checked antivirus logs and no suspicious infection were found in the recent past. We had not enabled auditing. We are doing it now. Hope this would help you in my query. I would like to know how are the files deleted ? Thanks Regards Jagdish
    60 pointsBadges:
    report
  • carlosdl
    Make sure you audit only what you really need to audit, since audit logs can grow really faster. Maybe some other details could help to investigate the problem. What database are you using ? What other software is running on the server ?
    69,475 pointsBadges:
    report
  • Jagdish
    Yes You are right. We need to be careful in checking the audit logs. Except for this Server application, there are no other application that is being used on the Server PC ? Maybe this might help you : The database is a bit huge of 75 Gb. with over a lakh of small files. Jagdish
    60 pointsBadges:
    report
  • nimo219
    i want to ask that my movies folder got  deleted automatically & it is not present in recycle bin  also....what could be reason??how can it be prevented from further deletion...can i recover them????? 
    10 pointsBadges:
    report
  • TomLiotta
    how can it be prevented from further deletion…   Is it your personal home PC? Or is it in a business office?   can i recover them?   If you backed them up, you restore from your backup. If you didn't, they're probably gone unless you get professional help. There are programs you can pay to use that claim to recover some files. The more expensive they are, the more likely they will do better work; but there is no guarantee.   Tom
    125,585 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following