Event Log problem

Discussion in 'Software' started by tcmm, May 28, 2009.

  1. tcmm

    tcmm Private E-2

    Hi

    The Event Viewer on my computer (XP SP2) seems not be recording certain events correctly anymore.

    The Antivirus, Internet Explorer and Media logs are now described as being Custom Log Error Records, and are always blank (as below eventlogprob.jpg).

    The computer is used by the family, so there is a good chance that the logs could have been modified accidentally somehow.

    Does anyone know how these logs could be restored to their original state, and start logging information again?

    Thanks
     
    tcmm, May 28, 2009
    #1
  2. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    Hi

    Are the other Event logs as in Windows Logs > Application, Security, System also blank of information?

    If so check that the Windows Event Log service (and Windows Event Log Collector) are started and set to automatic, in Services. And likely need to reboot to start the service properly.


    Also from this KB article try clearing the event logs log (section is entitled How to Set Log Size and Overwrite Options ) http://support.microsoft.com/kb/308427
     
    DavidGP, May 28, 2009
    #2
  3. tcmm

    tcmm Private E-2

    Thanks for the reply and the link.

    The Application, System and Security logs are recording information, and are described as Applicaton, System and Security logs as opposed to the other three which are now described as Custom Error logs.

    Services indicates that the Event Log is started and set to automatic.

    Unfortunately the Microsoft link only seems to refer to the logs in their correct state.

    I'd be very grateful for any further thoughts you may have.

    Thanks
     
    tcmm, May 28, 2009
    #3
  4. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    Hi

    Maybe completely deleting the actual event logs data may help and when restarted and a new event log data file (.evt) is created it may recover that listing.


    http://support.microsoft.com/kb/172156



    Check this location %SystemRoot%\System32\Winevt\Logs\ are there logs with names like Antivirus etc? (just paste the bold bit into any address bar be it a folder or browser to get to that folder)


    The below is something if your not confortable doing dont as it may or may not work, could cause other issues, the risk is yours.

    My thought is if you have another XP pc to hand, copy the contents of that folder to USB pen or similar and then backup your folder and its contents to somewhere on your HDD and then copy the contents of the other PCs event log logs to your folder and reboot may or may not work. (also do a system restore point) IF that works you would have to clear the logs of data as they will be for another PCs Antivirus and Explorer etc

    Would personally just start with one say Antivirus and see if that works.
     
    DavidGP, May 29, 2009
    #4

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds