Services.msc Logging

[Jason M]

Is there a way to find out when a service was intalled on
Windows 2000 Server. I have a "Microsoft Server" service
on only one AD server which has been installed only
recently(the service). The description for this service,
is "Provides Microsoft server security to the complete
system".

The target file is WINNT\System32\scmn.exe can not be
found on the system either.

There must be a file where windows keeps track of when a
service was installed.

Thanks.

 

[Steven L Umbach]

You may be able to find that information in Event Viewer under system or
application. Look in Task Manager for any unusual process running. Stopping
and starting the service may make it more obvious in Task Manager or tlist
utility [you could dump to .txt file] as to what the process is. You may
also want to run fport on your computer to see if it listening on a suspect
port as compared to the other domain controllers, and again stop the service
to do a comparison. Of course running a virus/trojan scan is always a good
idea when unusual avtivity is observed. A serach of Google and Sarc showed
nothing for scmn.exe. --- Steve

http://packetstormsecurity.nl/filedesc/fport.zip.html