Where is the IIS log file for windows 2000?

[RIGorous1]

Hey Everyone,

So I think one of the nerds down the hall hacked my computer using metasploit cause I sawed one of those DOS prompts pop up, there are some new accounts in my windows 2000 computer, and my mouse moves when I'm not around (according to my roomie). I'm gonna report him to the RA, but I need some evidence to prove that it was this guy (an IP or something).

Can someone tell me where the log files are for windows 2000? I have IIS running, so he probably hacked that.

Thanks,

Rig

 

[Markbnj]

I haven't looked in a long time at IIS under Win2k, but the logs are in system32\logfiles I think.

 

[EBH]

if you find out its him smash his face in

 

[SparkyJJO]

after you smash his face in install ZoneAlarm (free download) and that'll keep him out

 

[benplaut]

if he was any good, he would have deleted the logs.

Even better, set up a script to delete all access logs a few minutes after he logs off.

 

[EBH]

just be glad he didn't format your drive

 

[MercenaryForHire]

Originally posted by: benplaut
if he was any good, he would have deleted the logs.

Even better, set up a script to delete all access logs a few minutes after he logs off.

QFT

Furthermore, what the holy hell are you doing running IIS in a dorm at all, never mind with no firewall?

I'm going to say back up anything that's not an EXE, format, and start fresh. Seriously.

- M4H

 

[nweaver]

Originally posted by: MercenaryForHire

Originally posted by: benplaut
if he was any good, he would have deleted the logs.

Even better, set up a script to delete all access logs a few minutes after he logs off.

QFT

Furthermore, what the holy hell are you doing running IIS in a dorm at all, never mind with no firewall?

I'm going to say back up anything that's not an EXE, format, and start fresh. Seriously.

- M4H

qft

Not only running IIS, but IIS5!!1!

You are a student, get the discount 2k3 Server with IIS6 or run apache, as BOTH are worlds better.