Event Viewer log files not displayed

  • Thread starter Thread starter Richard Haynes
  • Start date Start date
R

Richard Haynes

When opening the event viewer on some of our Windows 2000
servers the event messages cannot be seen or opened
although the system reports that there are entries
present. The events can however be viewed using Hyena,
(a third party app). All systems affected have SP4
installed.
 
Check the size of the files, and if they show to have content, you probably have
corrupted files.

If so, you will need to rebuild them.

Go to Services and disable Event log

Do a search for *.evt, and delete sysevent.evt, secevent.evt, and appevent.evt or
add.old to the end.

They are located %SystemRoot%\Winnt\System32\config\<file>.evt

Reboot and the new files will be generated.

If you renamed instead of deleting, search for *.old and nukem.

Go back to Services and restart Event log and set to Automatic.

You should be good to go.

There have been too many with this problem for it to be a coincidence. It's an
infection, hack, or one of the hotpatches causing it.




good computing,
don
--------------

When opening the event viewer on some of our Windows 2000
servers the event messages cannot be seen or opened
although the system reports that there are entries
present. The events can however be viewed using Hyena,
(a third party app). All systems affected have SP4
installed.
 
Back
Top