We have a Windows 2003 development server (IIS and SQL Server) with remote desktop access and some employees have admin rights.
A couple weeks ago, a lot of important files (dlls, exes, msc and other stuff) disappeared from the system32 directory. The server is barely running (lots of errors!!!) and we are currently setting up another one.
I assume that someone did it since I did a virus scan with Trend Micro and everything looks fine.
How can I find who or what did this to our server?