event logger

  • Thread starter Thread starter Lav
  • Start date Start date
L

Lav

I don't know if i am posting this to the right area, so
bare with me. Everytime I turn on my computer i get a
message box that states- "can not start event logger"
Please help!! Thanks
 
Control Panel|Admin Tools|Services check to see if the 'Event Log' service
indicates 'Started' if not try starting it and post the exact text of any
error message you receive.

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
|I don't know if i am posting this to the right area, so
| bare with me. Everytime I turn on my computer i get a
| message box that states- "can not start event logger"
| Please help!! Thanks
 
What happens when you try?

Start|Run|services.msc

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

|I can not get to the control panel, i can only get to task
| manager.
 
When I turn on the computer, it states the 2000
professional is booting up, then it automatically goes to
the message window stating "can not start event logger" and
a ok button, if i click the ok button the whole screen goes
black. I tried starting it in safe mode and the same thing
happens. I can only do contol/alt/delete to get task
manager and of course the F keys. do you know what an
event logger is-i reseached it and can't get a clear
answer. Thank you for all of your help.

Lavender
 
There's no such part of the operating system called "event logger"

Start|Run|services.msc

and check to see if the 'Event Log' service indicates 'Started' if not try
starting it and post the exact text of any error message you receive.


--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
|
| When I turn on the computer, it states the 2000
| professional is booting up, then it automatically goes to
| the message window stating "can not start event logger" and
| a ok button, if i click the ok button the whole screen goes
| black. I tried starting it in safe mode and the same thing
| happens. I can only do contol/alt/delete to get task
| manager and of course the F keys. do you know what an
| event logger is-i reseached it and can't get a clear
| answer. Thank you for all of your help.
|
| Lavender
 
The problems is i can not get to the start. I
automatically goes to a blank screen with the message box
that states "can not start event logger"

Thanks
 
You mention getting to Task Manager choose File|New Task|services.msc

So I have to ask; what else are you not telling us? Is this a new install?
Does the shell not start at all? Can you logon as another user? Safe mode
start? Accurate details of the problem and error messages you receive are
the key to your solution.


--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| The problems is i can not get to the start. I
| automatically goes to a blank screen with the message box
| that states "can not start event logger"
|
| Thanks
 
In said:
You mention getting to Task Manager choose File|New
Task|services.msc

So I have to ask; what else are you not telling us? Is this a new
install? Does the shell not start at all? Can you logon as another
user? Safe mode start? Accurate details of the problem and error
messages you receive are the key to your solution.
Click to expand...

Dave/Lav, I wonder if this is malware?

http://www.sophos.com/virusinfo/analyses/trojwebberc.html

"HKLM\Software\Microsoft\Windows\CurrentVersion
\ShellServiceObjectDelayLoad\Web Event Logger"

Just one hit searching Google
"event logger" +malware OR trojan OR virus
 
Could be Mark, no idea though at this point.

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| Dave/Lav, I wonder if this is malware?
|
| http://www.sophos.com/virusinfo/analyses/trojwebberc.html
|
| "HKLM\Software\Microsoft\Windows\CurrentVersion
| \ShellServiceObjectDelayLoad\Web Event Logger"
|
| Just one hit searching Google
| "event logger" +malware OR trojan OR virus
 
-----Original Message-----
I don't know if i am posting this to the right area, so
bare with me. Everytime I turn on my computer i get a
message box that states- "can not start event logger"
Please help!! Thanks
.
Click to expand...
 
Dave,

Could he do the Ctrl-Alt-Del to get Task Manager and then use Run New Task to get Services.msc? It works on my machine.

Would that even help him solve the problem?

--
And always try the MS KB first before posting.
The answer is probably already posted.
MS KB: http://support.microsoft.com/default.aspx?scid=fh;EN-US;KBHOWTO
----
Mark-Allen Perry
ALPHA Systems
Marly, Switzerland
mark-allen_AT_mvps_DOT_org

Could be Mark, no idea though at this point.

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| Dave/Lav, I wonder if this is malware?
|
| http://www.sophos.com/virusinfo/analyses/trojwebberc.html
|
| "HKLM\Software\Microsoft\Windows\CurrentVersion
| \ShellServiceObjectDelayLoad\Web Event Logger"
|
| Just one hit searching Google
| "event logger" +malware OR trojan OR virus
 
:
Dave,

Could he do the Ctrl-Alt-Del to get Task Manager and then use Run New Task
to get Services.msc? It works on my machine.
* Yes, should be able to. I've asked this twice.

Would that even help him solve the problem?
* It's looking like we'll never know.

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect
 
Hullo there , i don't know if this is the right place -
but here goes. My friend is having a nightmare with the '
cannot start event logger' message. He is running xp pro.
have tried checking event log and it's 'started'. I've
managed to get him into his computer by opening a file
through the task manager. But everything is virtually
frozen. Hve checked the net for virus updates - but can't
seem to find very much and certainly nothing on the
microsoft site. Please help - he's driving me insane! As
if i know anymore than he does!!!
 
Look for something suspicious here. Natively you can; Start\Settings\Control
Panel\Administrative Tools\Computer Management(Local)\System
Information\Software Environment\Startup Programs|View|Advanced, then in the
"Location" column, you'll find the path to the "Startup" location either in
the "Startup" directories or from the registry's "Run" keys. (note that this
windows is read-only so you must manually navigate to the location below to
edit or otherwise delete)

%ALLUSERSPROFILE%\Start Menu\Programs\Startup
%USERPROFILE%\Start Menu\Programs\Startup

You can delete the shortcuts that you no longer want to run.


HKLM\Software\Microsoft\Windows\CurrentVersion\Run
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

You can delete the string value for the program you no longer want to run.

or copy msconfig from Windows XP to the "windows" directory


--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| Hullo there , i don't know if this is the right place -
| but here goes. My friend is having a nightmare with the '
| cannot start event logger' message. He is running xp pro.
| have tried checking event log and it's 'started'. I've
| managed to get him into his computer by opening a file
| through the task manager. But everything is virtually
| frozen. Hve checked the net for virus updates - but can't
| seem to find very much and certainly nothing on the
| microsoft site. Please help - he's driving me insane! As
| if i know anymore than he does!!!
 
Thanks for the reply dave. I'm probably being a complete donut here ( i def.
am). After clicking Comp. Management(local) there's nothing which says system
info. and also - i'm pretty confused as to what exactly it is you want me to
do - do i delete these entries (are these string values?) starting HKLM and
HKCU. Sorry for being such a muppet.
All the best and i really appreciate the help.
Shuggy (broken finger)
 
It could be a fishy no good startup program which you Dave also
pointed out to.
You can use a tool named autorun.exe from sysinternals.com which also
lists all of the startup programs.

Additionally is the Event Logging Service in running state when you
see it in services.msc
Is the Startup type set to Automatic. If not set it to Automatic and
then reboot the box. The Service should come up on its own.

If it doesnt allow you to manually alter the startup status, you can
do this through the registry.
In regedit, go to
[ HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog ]

Right hand pane - the valuedata of the value "START" should be set to
2.

--
Gautam Anand
e: gautam at hotpop dot com
---------------------------------
message | Thanks for the reply dave. I'm probably being a complete donut here
( i def.
| am). After clicking Comp. Management(local) there's nothing which
says system
| info. and also - i'm pretty confused as to what exactly it is you
want me to
| do - do i delete these entries (are these string values?) starting
HKLM and
| HKCU. Sorry for being such a muppet.
| All the best and i really appreciate the help.
| Shuggy (broken finger)
|
| "Dave Patrick" wrote:
|
| > Look for something suspicious here. Natively you can;
Start\Settings\Control
| > Panel\Administrative Tools\Computer Management(Local)\System
| > Information\Software Environment\Startup Programs|View|Advanced,
then in the
| > "Location" column, you'll find the path to the "Startup" location
either in
| > the "Startup" directories or from the registry's "Run" keys. (note
that this
| > windows is read-only so you must manually navigate to the location
below to
| > edit or otherwise delete)
| >
| > %ALLUSERSPROFILE%\Start Menu\Programs\Startup
| > %USERPROFILE%\Start Menu\Programs\Startup
| >
| > You can delete the shortcuts that you no longer want to run.
| >
| >
| > HKLM\Software\Microsoft\Windows\CurrentVersion\Run
| > HKCU\Software\Microsoft\Windows\CurrentVersion\Run
| >
| > You can delete the string value for the program you no longer want
to run.
| >
| > or copy msconfig from Windows XP to the "windows" directory
| >
| >
| > --
| > Regards,
| >
| > Dave Patrick ....Please no email replies - reply in newsgroup.
| > Microsoft Certified Professional
| > Microsoft MVP [Windows]
| > http://www.microsoft.com/protect
| >
| > "shuggy" wrote:
| > | Hullo there , i don't know if this is the right place -
| > | but here goes. My friend is having a nightmare with the '
| > | cannot start event logger' message. He is running xp pro.
| > | have tried checking event log and it's 'started'. I've
| > | managed to get him into his computer by opening a file
| > | through the task manager. But everything is virtually
| > | frozen. Hve checked the net for virus updates - but can't
| > | seem to find very much and certainly nothing on the
| > | microsoft site. Please help - he's driving me insane! As
| > | if i know anymore than he does!!!
| >
| >
| >
 
For Windows XP you can Start|Run|msconfig to look at what runs at startup.

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| Thanks for the reply dave. I'm probably being a complete donut here ( i
def.
| am). After clicking Comp. Management(local) there's nothing which says
system
| info. and also - i'm pretty confused as to what exactly it is you want me
to
| do - do i delete these entries (are these string values?) starting HKLM
and
| HKCU. Sorry for being such a muppet.
| All the best and i really appreciate the help.
| Shuggy (broken finger)
 
Back
Top