Event Viewer Issues

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hey all,
I have an issue with a client and a Windows 2000 SP4 (SBS) server. Got a
call early this morning saying that their server did a memory dump and
restarted. So I come in, find a 1 GB memory dump file and that my event logs
are somewhat interesting. I can view Application, DNS, File Replication, and
Directory Services just fine. But when it comes down to Security and System
event logs, they are blank...but not. It looks like they are empty but when
you click inside the MMC window, it highlights with no text in the record.
Again, when you look at the window, it looks empty. But when you click
inside, you can highlight a single record. You can even double-click on it
and go to properties, but it comes up saying "No properties availible for
this object". I need some help here because without my event logs, its like
i'm flying blind. I will be checking this thread, so please respond if you
have any questions for comments!

-Michael Sainz
 
This is a common malidy associated with one of the lesser known infections.
Rebuild th eEvent Viewer files.

Applications.evt
System.evt
Secrity.evt

add the extension .old to each of them in a file search *.evt

Check you pagefile next to see if all stays well in it.

don
---------



Hey all,
I have an issue with a client and a Windows 2000 SP4 (SBS) server. Got a
call early this morning saying that their server did a memory dump and
restarted. So I come in, find a 1 GB memory dump file and that my event logs
are somewhat interesting. I can view Application, DNS, File Replication, and
Directory Services just fine. But when it comes down to Security and System
event logs, they are blank...but not. It looks like they are empty but when
you click inside the MMC window, it highlights with no text in the record.
Again, when you look at the window, it looks empty. But when you click
inside, you can highlight a single record. You can even double-click on it
and go to properties, but it comes up saying "No properties availible for
this object". I need some help here because without my event logs, its like
i'm flying blind. I will be checking this thread, so please respond if you
have any questions for comments!

-Michael Sainz
 
The files are

AppEvent.evt
SysEvent.evt
SecEvent.evt

sorry about blurting out the other.

don
-----



Hey all,
I have an issue with a client and a Windows 2000 SP4 (SBS) server. Got a
call early this morning saying that their server did a memory dump and
restarted. So I come in, find a 1 GB memory dump file and that my event logs
are somewhat interesting. I can view Application, DNS, File Replication, and
Directory Services just fine. But when it comes down to Security and System
event logs, they are blank...but not. It looks like they are empty but when
you click inside the MMC window, it highlights with no text in the record.
Again, when you look at the window, it looks empty. But when you click
inside, you can highlight a single record. You can even double-click on it
and go to properties, but it comes up saying "No properties availible for
this object". I need some help here because without my event logs, its like
i'm flying blind. I will be checking this thread, so please respond if you
have any questions for comments!

-Michael Sainz
 
Back
Top