Scores of missing System32 Files

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Background:

* 2 Machines running Windows 2000 Server SP
* 1st is Primary, 2nd is Fail-Ove
* Both configured as Web and Oracle Database servers running .NE
* Both connected to the same outside networ
* Nearly identical configurations except that Oracle Advanced Replication running on #
* No automatic backups are being scheduled (NT backup, etc.
* Been running in the field for month
* Latest McAfee Virus signatures installe

Problem

Last week one of our sites crashed out of the blue. Upon inspection of the machine, the Fail- over server was the one that crashed, not the Primary. Turns out there were several hundred missing files from the System32 directory (ie. Ntoskrnl.exe, etc.). At first glance, we chalked it up as user error and figured a onsite tech somehow got into the OS and did a DEL *. from System32 folder.

Alas, it has happened two other times now at different sites. Same problem - about 1000 or so files are missing from the System32 folder.

We are a bit stumped here as to what could be causing this to occur. Its too coincidental to expect sabotage. It doesn't sound virus-related since it only affects the Fail-over servers, not the primaries

Any help is appreciated

---Scott
 
Note: The servers will not reboot after this occurrence since NTOSKRNL.EXE is now missing among many other files as well.
 
Back
Top