Audit Process Tracking-Windows XP

Tracking process for audit purpose in the event of suspected virus activity

1. Enable Audit Process Tracking
start:run->gpedit.msc->computer configuration->windows settings->security settings->local policies->audit policy->audit process tracking (set security setting to success)

2. Show Event Viewer
start:run->eventvwr->security

3. Disable Audit Process Tracking
Disable audit process tracking