What happened to my files and folders?

Recovering files and folders

[dckim]

I am using Sun's Slaris 8.0 OS for the sun station which I do have root access. But I am an extreme newbie when it comes to the Sun system since I am a PC guy.

Over night I must have left myself logged on or someone broke into the system or any other bad things happened to my system.

When I came to work today, I find my Sun station all locked up (can not do anything) so I power cycled it and also performed the hard disk check and now I am missing several of my folders which contained s**t load of files which I need. And all of these files were created yesterday so it has not been backed up in any place (my bad...). But I want to know what might have happened to all of my files and several folders.

Is there any command which I can find out if anyone might have accessed certain files (like modify or delete) or even broken into my Sun server box?

Thank you very much for any help.

David Kim

[quebrada]

to see the who has been logging into your system on a SUN run the last command. To see the last 10 sessions type"

last -10

As for what happened to your files.... When you powered off you computer you may have damaged part of the file system. The files might be there but the directory which points to them may have been damaged. You can recover this info in the lost and found directory. If you run the fsck command in single user mode you may be able to recover this data (you will need root access).