new creation date on 2 tables

[jimatqsi]

This morning a client could not run their shipping program. I found that the create date stamp on 2 tables in the shipping system were strangely showing dates from yesterday morning, 6:53 and 6:55 AM. Those tables are both about 3 years old. One of the tables could not be viewed or queried.

I stopped and restarted the SQL service and the tables can now be accessed normally. What could have happened?

Thanks,
Jim

[Jerry Winston]

I can't say definitively with so few clues, but it sounds like someone has too much DDL access. I suggest checking users with DDL access with LOGIN events from the SQL Log occurring around the time of tables being (re)created.

edit:
If you find out what happened let me know.

[Brad Orders]

This is a tricky one. If access to a table is locked up and requires a restart of the SQL Service, then this isn't a run-of-the-mill issue.

I would suggest backing up the database, then reviewing all triggers in the database, especially any added recently.

Is there a job that is scheduled to run at that time? If so, review the code in the job.

Just to cover all bases, check some varchar/nvarchar column values in the same tables. Is there any odd-looking data? If so, your client may be the victim of a hacker-bot, and it's time for a complete security review ....

Hope this helps.


Brad