Screenshot program on server

[Woz]

Hi, we have Server 2003 standard edition installed at work.
It was reported to me last week (I have been off for a while) that someone had been looking at a site but was never approached and they wanted me to investigate. However, I have looked at the logs and cause there only there for 7 days the date they required as now been overwritten.

Is there another way to find out what this person has been on? I checked the history on the machine but that was erased.

Is there a program on the server which takes screenshots? Bit like a keylogger? Or another area in the server which records the data?

I dont really want to go the the ISP provider just for this info even if they were able to give it to me - seems way to much hassle.

Im interested for the future offenders as well so people....any help would be great!

Thanks

Woz

 

[spacedude89]

im not sure about a screenshot program, but i know that even if you clear all the history, the info still exists, take a look at this, and sorry bout the url language.

http://www.****microsoft.com/content/ms-hidden-files.shtml#4

edit: oh, the forum blocked the F word, just replace the **** with f***

 

[Trizoy]

check in the cookies.

 

[Woz]

Ok thanks for the reply.

Really difficult to read tho!

Woz