I have a Windows 2003 server that was hit by MYTOB.52350!ZIP!Worm. Immediately after this (possibly a coincident)an IPSec error(s) appeared in the event log – 4292 4294 4295. IPSec had basically stopped working. No-one could log in. All TCP activity stopped. To resolve the problem is was recommended (in the event log) to DISABLE the IPSec service and restart the server. This I did to get the server going again. Now if I re-enable the service IPSec service will not start – automatically or manually and TCP/IP activity stops again. Any suggestions, please. Regards, Paul