Does WinXP Pro automatically log deletion of files?

[CZroe]

If Windows XP Pro keeps a log of when files were deleted, I may be able to bust these bastards.

I had just completed a fresh installation of WinXP Pro. After installing the critical updates, I downloaded my DVD decoder card drivers and player application from www.sigmadesigns.com. I left the room while my 'friends' watched a rented DVD movie (using TV output from the decoder card).

Either my 'friends' installed a backdoor program last night, or they came inside while I was gone to school today. I turned on my computer and noticed that there was no desktop wallpaper.

I went into Display Properties to change the wallpaper back to 'Windows XP.jpg' and found that all of the default background images that came with WinXP had been deleted. Someone had added 'Internet Explorer Wallpaper', which was a pornographic image from www.realdoll.com. I always lock my door when I leave, so I assumed they must have installed a backdoor program on my compuer last night. Does Windows XP create a log file that I can use to find out when the files were deleted?

 

[bsobel]

The volume change log will track deletes/renames/etc, but I'm not sure if a) it has a timestamp for each action (I believe it does). The kicker is I'm not sure of a good log veiwer for that data. Try google for 'volume change log' and 'ntfs' and hopefully you'll get lucky.
Bill