Hi Network administrator.

[webarts3000]

If you suspect that a Hacker got into your system and modified few files contents.
Which system files do you check into, to see
what info was erased or modified?

Web Arts 3000

 

[hang-the-9]

Are you talking about a server or a home PC? You can't really tell without a log that details all activity on the computer. Look for date/time stamps of the files that you think were changed. The only way to tell what was changed is to compare the file now to a backup of the file from before.

 

[Jimmkibogo]

What are you using? If its a router probably you must be having the log service, see there. If a personal comp check on the event. Programs -> Administrative tools -> Event viewer