Getting the log for the deleted file.

[Guest]

As in windows environment, all activities are stored in log file or in event
viewer. Im using Windows XP Professional with SP2, recently all the setup
files with the extention ".exe" are deleted in one of my logical drive. can I
retrieve them or if any possible way to find the "log file about the date and
time of the file is deleted".

 

[Marcin Domaslawski]

Hi,

There isn't mechanism to log that simple activities like files operations
e.g. deleting/coping/modifying.

Marcin Domaslawski

 

[Rock]

As in windows environment, all activities are stored in log file or in
event
viewer. Im using Windows XP Professional with SP2, recently all the setup
files with the extention ".exe" are deleted in one of my logical drive.
can I
retrieve them or if any possible way to find the "log file about the date
and
time of the file is deleted".

Not all activities are logged. There is no log of deletions.

 

[mikeyhsd]

are you sure they are deleted or just not showing.
check under Folder Options to make sure you have enabled to view all file types and system files.



(e-mail address removed)



As in windows environment, all activities are stored in log file or in event
viewer. Im using Windows XP Professional with SP2, recently all the setup
files with the extention ".exe" are deleted in one of my logical drive. can I
retrieve them or if any possible way to find the "log file about the date and
time of the file is deleted".

 

[Jaelani C. U.]

You can enable auditing to log file access, but that requires NTFS and ALL
file access would be logged (not just the ones that was deleted).