access logs

we run windows servers where i work, and i'm just a developer (aka the servers aren't my responsibility). some strange things have been happening with one of the websites we host and i am hoping somebody might be able to shed some light on it because nobody here (not even the server people) can.

every so many days for the past couple of months i will notice changes to one of our websites, and the owner (who has ftp access) claims it isn't him, and i'm pretty darn sure it's nobody here at work. for example, a link i added to the main page of this site is now gone, as if it was never added (although it was there for a couple weeks), or a page in which i added error checking to a form now has everything after the body tag cut off so the page no longer displays.

the weirdest part is, looking at the last modification time of these files only tells me when i personally last updated them, even though somehow they HAVE been modified since then.

so, could it be a virus? any pointers where to look?

appears we'll just reset the root password and strip everyone elses access for now... hmm.

Doesn't sound like corruption to me, so my guess would be something more malicious such as a virus, but a pretty low-key one at that.

well this is happening with one website, that i know of. so far just the one.

This might be related to you:
http://www.windowsnetworking.com/ar...guring-FTP.html