Security log not logging

[Guest]

I have a Windows 2003 Server that in the event viewer, the security log is
not logging anything. I have looked in the ost common places, i have no
filters on, and it is set to display everything.

Any ideas.
Thanks

 

[ed]

Check your services and make sure it and related services have started.

Trojans and back doors can install programs that delete the entries, or in
one case that I had happen to me, it actually changed the registry entry for
COM+ EventSystem to another file name:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventSystem\Parameters
was set to nettapi.dll instead of es.dll

I would definitely run an antivirus scan! If your AV has been disabled, it
is a sure sign of trouble from a virus. Also, may times they change your
hosts file to redirect all the major AV addresses to a bogus or non relevant
IP.

 

[Guest]

I checked that stuff and everything is OK. What services need to be riunning
for the event veiwer to work. The system and application log work fine.

Thanks
Daryl