locked
where is the log to show all the installation RRS feed

  • Question

  • I remember there is a log to record all the installation including runtime and components onto windows 2003 server for a given time, say, in a last few days, but cannot find it.

    Our system has been scanned with a trojan last night. We hope to see all installations onto the box to find out what installations have been done. People usually connect to the server via terminal session. Is there a way to find out which program has been installed and through which terminal session?

    TIA.

    Wednesday, February 16, 2011 11:00 AM

All replies

  • A trojan is unlikely log its install.

    The following is signature, not part of post
    Please mark the post answered your question as the answer, and mark other helpful posts as helpful, so they will appear differently to other users who are visiting your thread for the same problem.
    Visual C++ MVP
    Wednesday, February 16, 2011 2:11 PM