Event log service is unavailable

S

Susa804

My os is Vista and I am logged on as administrator. Went to access Diskeeper
to manually defragment and recieved a message that said "Diskeeper failed to
connect to the service. The service may have stopped. See the Windows Event
Log for more details." I then went to open the Event Log and it said "Event
log service is unavailable. Verify that th service is running"... so I went
to services and eventhough Windows Event Log is set to automatic, it was not
running. I clicked to start the service and got back a message that said
that the service could not be started "Error 2:The system cannot find the
specified file." The path to this service was shown to be
"C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted" so I went
to the system32 folder in windows and I have a file named svchost.exe so I
don't know if the LocalServiceNetworkRestricted has anything to do with this.

Someone please help!
 
R

Ramesh, MS-MVP

The Image Path value you posted is correct. Running the SFC command might help. See:

Some Windows Vista functions may not work, or Windows Vista may stop responding:
http://support.microsoft.com/kb/929833

--
Regards,

Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
Windows® Troubleshooting http://www.winhelponline.com
Winhelponline.com blog http://www.winhelponline.com/blog


My os is Vista and I am logged on as administrator. Went to access Diskeeper
to manually defragment and recieved a message that said "Diskeeper failed to
connect to the service. The service may have stopped. See the Windows Event
Log for more details." I then went to open the Event Log and it said "Event
log service is unavailable. Verify that th service is running"... so I went
to services and eventhough Windows Event Log is set to automatic, it was not
running. I clicked to start the service and got back a message that said
that the service could not be started "Error 2:The system cannot find the
specified file." The path to this service was shown to be
"C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted" so I went
to the system32 folder in windows and I have a file named svchost.exe so I
don't know if the LocalServiceNetworkRestricted has anything to do with this.

Someone please help!
 
S

Susa804

Yes I have turned off services that I did not need but not prior to this
happening. Everything was OK and working a few days prior to this. Have no
idea what caused it..
 
S

Susa804

Thanks for the info. I followed the instructions on the page and got this
file as not being able to be repaired:
2008-03-08 11:45:15, Info CSI 000000e4 [SR] Cannot
repair member file [l:20{10}]"tcpmon.ini" of
Microsoft-Windows-Printing-StandardPortMonitor-TCPMonINI, Version =
6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral,
VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type
neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2008-03-08 11:45:21, Info CSI 000000e6 [SR] Cannot
repair member file [l:20{10}]"tcpmon.ini" of
Microsoft-Windows-Printing-StandardPortMonitor-TCPMonINI, Version =
6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral,
VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type
neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2008-03-08 11:49:54, Info CSI 00000149 [SR] Cannot
repair member file [l:20{10}]"tcpmon.ini" of
Microsoft-Windows-Printing-StandardPortMonitor-TCPMonINI, Version =
6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral,
VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type
neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2008-03-08 11:49:54, Info CSI 0000014b [SR] Cannot
repair member file [l:20{10}]"tcpmon.ini" of
Microsoft-Windows-Printing-StandardPortMonitor-TCPMonINI, Version =
6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral,
VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type
neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

This is some type of printer file and unfortunately has nothing to do with
my problem. I tried starting the service again after using the system file
checker tool but still no results.

Thanks for your help anyway. :0)

Ramesh said:
The Image Path value you posted is correct. Running the SFC command might help. See:

Some Windows Vista functions may not work, or Windows Vista may stop responding:
http://support.microsoft.com/kb/929833

--
Regards,

Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
Windows® Troubleshooting http://www.winhelponline.com
Winhelponline.com blog http://www.winhelponline.com/blog


My os is Vista and I am logged on as administrator. Went to access Diskeeper
to manually defragment and recieved a message that said "Diskeeper failed to
connect to the service. The service may have stopped. See the Windows Event
Log for more details." I then went to open the Event Log and it said "Event
log service is unavailable. Verify that th service is running"... so I went
to services and eventhough Windows Event Log is set to automatic, it was not
running. I clicked to start the service and got back a message that said
that the service could not be started "Error 2:The system cannot find the
specified file." The path to this service was shown to be
"C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted" so I went
to the system32 folder in windows and I have a file named svchost.exe so I
don't know if the LocalServiceNetworkRestricted has anything to do with this.

Someone please help!
Click to expand...
 
R

Ramesh, MS-MVP

Check this, Susa804.

The Windows Event Log Service cannot be started in Vista.:
http://geekvalley.blogspot.com/2008/03/windows-event-log-service-cannot-be.html

--
Regards,

Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
Windows® Troubleshooting http://www.winhelponline.com
Winhelponline.com blog http://www.winhelponline.com/blog


Thanks for the info. I followed the instructions on the page and got this
file as not being able to be repaired:
2008-03-08 11:45:15, Info CSI 000000e4 [SR] Cannot
repair member file [l:20{10}]"tcpmon.ini" of
Microsoft-Windows-Printing-StandardPortMonitor-TCPMonINI, Version =
6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral,
VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type
neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2008-03-08 11:45:21, Info CSI 000000e6 [SR] Cannot
repair member file [l:20{10}]"tcpmon.ini" of
Microsoft-Windows-Printing-StandardPortMonitor-TCPMonINI, Version =
6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral,
VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type
neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2008-03-08 11:49:54, Info CSI 00000149 [SR] Cannot
repair member file [l:20{10}]"tcpmon.ini" of
Microsoft-Windows-Printing-StandardPortMonitor-TCPMonINI, Version =
6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral,
VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type
neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2008-03-08 11:49:54, Info CSI 0000014b [SR] Cannot
repair member file [l:20{10}]"tcpmon.ini" of
Microsoft-Windows-Printing-StandardPortMonitor-TCPMonINI, Version =
6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral,
VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type
neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

This is some type of printer file and unfortunately has nothing to do with
my problem. I tried starting the service again after using the system file
checker tool but still no results.

Thanks for your help anyway. :0)

Ramesh said:
The Image Path value you posted is correct. Running the SFC command might help. See:

Some Windows Vista functions may not work, or Windows Vista may stop responding:
http://support.microsoft.com/kb/929833

--
Regards,

Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
Windows® Troubleshooting http://www.winhelponline.com
Winhelponline.com blog http://www.winhelponline.com/blog


My os is Vista and I am logged on as administrator. Went to access Diskeeper
to manually defragment and recieved a message that said "Diskeeper failed to
connect to the service. The service may have stopped. See the Windows Event
Log for more details." I then went to open the Event Log and it said "Event
log service is unavailable. Verify that th service is running"... so I went
to services and eventhough Windows Event Log is set to automatic, it was not
running. I clicked to start the service and got back a message that said
that the service could not be started "Error 2:The system cannot find the
specified file." The path to this service was shown to be
"C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted" so I went
to the system32 folder in windows and I have a file named svchost.exe so I
don't know if the LocalServiceNetworkRestricted has anything to do with this.

Someone please help!
Click to expand...
 
B

badgeros

Susa804

I have exactly the same problem as you right down to the way it was
discovered using Diskeeper. I have tried everything listed here as
suggested by other investigation and I am afraid still nothing.
Currently working with experts exchange to try and find an answer....

So far no one seems to be able to assit. Strange then that it has
happened the same way on mutally exclusive machines.

BGR.




Check this, Susa804.

The Windows Event Log Service cannot be started in Vista.:http://geekvalley.blogspot.com/2008/03/windows-event-log-service-cann...

--
Regards,

Ramesh Srinivasan, Microsoft MVP  [Windows Shell/User]
Windows® Troubleshootinghttp://www.winhelponline.com
Winhelponline.com bloghttp://www.winhelponline.com/blog


Thanks for the info.  I followed the instructions on the page and got this
file as not being able to be repaired:
2008-03-08 11:45:15, Info                  CSI    000000e4 [SR] Cannot
repair member file [l:20{10}]"tcpmon.ini" of
Microsoft-Windows-Printing-StandardPortMonitor-TCPMonINI, Version =
6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral,
VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type
neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2008-03-08 11:45:21, Info                  CSI    000000e6 [SR] Cannot
repair member file [l:20{10}]"tcpmon.ini" of
Microsoft-Windows-Printing-StandardPortMonitor-TCPMonINI, Version =
6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral,
VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type
neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2008-03-08 11:49:54, Info                  CSI    00000149 [SR] Cannot
repair member file [l:20{10}]"tcpmon.ini" of
Microsoft-Windows-Printing-StandardPortMonitor-TCPMonINI, Version =
6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral,
VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type
neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2008-03-08 11:49:54, Info                  CSI    0000014b [SR] Cannot
repair member file [l:20{10}]"tcpmon.ini" of
Microsoft-Windows-Printing-StandardPortMonitor-TCPMonINI, Version =
6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral,
VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type
neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

This is some type of printer file and unfortunately has nothing to do with
my problem.  I tried starting the service again after using the system file
checker tool but still no results.

Thanks for your help anyway.  :0)



Ramesh said:
The Image Path value you posted is correct. Running the SFC command might help. See:
Click to expand...
Some Windows Vista functions may not work, or Windows Vista may stop responding:
http://support.microsoft.com/kb/929833
Ramesh Srinivasan, Microsoft MVP  [Windows Shell/User]
Windows® Troubleshootinghttp://www.winhelponline.com
Winhelponline.com bloghttp://www.winhelponline.com/blog
Click to expand...
My os is Vista and I am logged on as administrator.  Went to access Diskeeper
 to manually defragment and recieved a message that said "Diskeeper failed to
connect to the service.  The service may have stopped.  See the Windows Event
Log for more details."  I then went to open the Event Log and it said "Event
log service is unavailable. Verify that th service is running"... so I went
to services and eventhough Windows Event Log is set to automatic, it wasnot
running.  I clicked to start the service and got back a message that said
that the service could not be started "Error 2:The system cannot find the
specified file." The path to this service was shown to be
"C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted" so I went
to the system32 folder in windows and I have a file named svchost.exe soI
don't know if the LocalServiceNetworkRestricted has anything to do with this.
Click to expand...
Someone please help!- Hide quoted text -
Click to expand...

- Show quoted text -
Click to expand...
 
R

Ramesh, MS-MVP

Hi BGR,

Have you checked the link I posted earlier? It says to verify if the "logs" folder is present and if it's writable.

--
Regards,

Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
Windows® Troubleshooting http://www.winhelponline.com
Winhelponline.com blog http://www.winhelponline.com/blog



Susa804

I have exactly the same problem as you right down to the way it was
discovered using Diskeeper. I have tried everything listed here as
suggested by other investigation and I am afraid still nothing.
Currently working with experts exchange to try and find an answer....

So far no one seems to be able to assit. Strange then that it has
happened the same way on mutally exclusive machines.

BGR.




Check this, Susa804.

The Windows Event Log Service cannot be started in Vista.:http://geekvalley.blogspot.com/2008/03/windows-event-log-service-cann...

--
Regards,

Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
Windows® Troubleshootinghttp://www.winhelponline.com
Winhelponline.com bloghttp://www.winhelponline.com/blog


Thanks for the info. I followed the instructions on the page and got this
file as not being able to be repaired:
2008-03-08 11:45:15, Info CSI 000000e4 [SR] Cannot
repair member file [l:20{10}]"tcpmon.ini" of
Microsoft-Windows-Printing-StandardPortMonitor-TCPMonINI, Version =
6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral,
VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type
neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2008-03-08 11:45:21, Info CSI 000000e6 [SR] Cannot
repair member file [l:20{10}]"tcpmon.ini" of
Microsoft-Windows-Printing-StandardPortMonitor-TCPMonINI, Version =
6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral,
VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type
neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2008-03-08 11:49:54, Info CSI 00000149 [SR] Cannot
repair member file [l:20{10}]"tcpmon.ini" of
Microsoft-Windows-Printing-StandardPortMonitor-TCPMonINI, Version =
6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral,
VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type
neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2008-03-08 11:49:54, Info CSI 0000014b [SR] Cannot
repair member file [l:20{10}]"tcpmon.ini" of
Microsoft-Windows-Printing-StandardPortMonitor-TCPMonINI, Version =
6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral,
VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type
neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

This is some type of printer file and unfortunately has nothing to do with
my problem. I tried starting the service again after using the system file
checker tool but still no results.

Thanks for your help anyway. :0)



Ramesh said:
The Image Path value you posted is correct. Running the SFC command might help. See:
Click to expand...
Some Windows Vista functions may not work, or Windows Vista may stop responding:
http://support.microsoft.com/kb/929833
Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
Windows® Troubleshootinghttp://www.winhelponline.com
Winhelponline.com bloghttp://www.winhelponline.com/blog
Click to expand...
My os is Vista and I am logged on as administrator. Went to access Diskeeper
to manually defragment and recieved a message that said "Diskeeper failed to
connect to the service. The service may have stopped. See the Windows Event
Log for more details." I then went to open the Event Log and it said "Event
log service is unavailable. Verify that th service is running"... so I went
to services and eventhough Windows Event Log is set to automatic, it was not
running. I clicked to start the service and got back a message that said
that the service could not be started "Error 2:The system cannot find the
specified file." The path to this service was shown to be
"C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted" so I went
to the system32 folder in windows and I have a file named svchost.exe so I
don't know if the LocalServiceNetworkRestricted has anything to do with this.
Click to expand...
Someone please help!- Hide quoted text -
Click to expand...

- Show quoted text -
Click to expand...
 
B

badgeros

Hi BGR,

Have you checked the link I posted earlier? It says to verify if the "logs" folder is present and if it's writable.

--
Regards,

Ramesh Srinivasan, Microsoft MVP  [Windows Shell/User]
Windows® Troubleshootinghttp://www.winhelponline.com
Winhelponline.com bloghttp://www.winhelponline.com/blog


Susa804

I have exactly the same problem as you right down to the way it was
discovered using Diskeeper.  I have tried everything listed here as
suggested by other investigation and I am afraid still nothing.
Currently working with experts exchange to try and find an answer....

So far no one seems to be able to assit.  Strange then that it has
happened the same way on mutally exclusive machines.

BGR.

Check this, Susa804.
Click to expand...
The Windows Event Log Service cannot be started in Vista.:http://geekvalley.blogspot.com/2008/03/windows-event-log-service-cann...
Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
Windows® Troubleshootinghttp://www.winhelponline.com
Winhelponline.com bloghttp://www.winhelponline.com/blog
Click to expand...
"Susa804" <[email protected]> wrote in messagenews:[email protected]...
Click to expand...
Thanks for the info. I followed the instructions on the page and got this
file as not being able to be repaired:
2008-03-08 11:45:15, Info CSI 000000e4 [SR] Cannot
repair member file [l:20{10}]"tcpmon.ini" of
Microsoft-Windows-Printing-StandardPortMonitor-TCPMonINI, Version =
6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral,
VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type
neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2008-03-08 11:45:21, Info CSI 000000e6 [SR] Cannot
repair member file [l:20{10}]"tcpmon.ini" of
Microsoft-Windows-Printing-StandardPortMonitor-TCPMonINI, Version =
6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral,
VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type
neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2008-03-08 11:49:54, Info CSI 00000149 [SR] Cannot
repair member file [l:20{10}]"tcpmon.ini" of
Microsoft-Windows-Printing-StandardPortMonitor-TCPMonINI, Version =
6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral,
VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type
neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2008-03-08 11:49:54, Info CSI 0000014b [SR] Cannot
repair member file [l:20{10}]"tcpmon.ini" of
Microsoft-Windows-Printing-StandardPortMonitor-TCPMonINI, Version =
6.0.6000.16386, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral,
VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type
neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
Click to expand...
This is some type of printer file and unfortunately has nothing to do with
my problem. I tried starting the service again after using the system file
checker tool but still no results.
Click to expand...
Thanks for your help anyway. :0)
Click to expand...
Ramesh said:
The Image Path value you posted is correct. Running the SFC command might help. See:
Some Windows Vista functions may not work, or Windows Vista may stop responding:
http://support.microsoft.com/kb/929833
--
Regards,
Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
Windows® Troubleshootinghttp://www.winhelponline.com
Winhelponline.com bloghttp://www.winhelponline.com/blog
My os is Vista and I am logged on as administrator. Went to access Diskeeper
to manually defragment and recieved a message that said "Diskeeper failed to
connect to the service. The service may have stopped. See the Windows Event
Log for more details." I then went to open the Event Log and it said "Event
log service is unavailable. Verify that th service is running"... so Iwent
to services and eventhough Windows Event Log is set to automatic, it was not
running. I clicked to start the service and got back a message that said
that the service could not be started "Error 2:The system cannot find the
specified file." The path to this service was shown to be
"C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted" so I went
to the system32 folder in windows and I have a file named svchost.exe so I
don't know if the LocalServiceNetworkRestricted has anything to do with this.
Someone please help!- Hide quoted text -
Click to expand...
Click to expand...
- Show quoted text -- Hide quoted text -
Click to expand...

- Show quoted text -
Click to expand...

Ramesh..

Yes have checked and the permissions are OK.....even changed them to
FULL CONTROL to double check. have even moved the log folder just to
se if Vista recreated it. Nothing. BTW my System Restore is also
corrupt and unable to run. I have a feeling it is all inter-related.

Bgr.
 
R

Ramesh, MS-MVP

Hi Bgr,

Perhaps we can work on this issue offline, if you can send me a PM.

--
Regards,

Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
Windows® Troubleshooting http://www.winhelponline.com
Winhelponline.com blog http://www.winhelponline.com/blog


Hi BGR,

Have you checked the link I posted earlier? It says to verify if the "logs" folder is present and if it's writable.

--
Regards,

Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
Windows® Troubleshootinghttp://www.winhelponline.com
Winhelponline.com bloghttp://www.winhelponline.com/blog
Click to expand...

Ramesh..

Yes have checked and the permissions are OK.....even changed them to
FULL CONTROL to double check. have even moved the log folder just to
se if Vista recreated it. Nothing. BTW my System Restore is also
corrupt and unable to run. I have a feeling it is all inter-related.

Bgr.
 
B

badgeros

I have found the solution myself via the net. The problem was caused
by JV16 Powertools 2008 by Macecraft. It is a bug in their software.

Installation of the software apparently adds registry keys of which
some are empty. There may be many issues but the key that affects the
event log services is listed below. Removal of this key and a re-boot
should correct the problem. As always take a backup of your registry
before making any changes.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog
\Parameters


Badgeros



Hi Bgr,

Perhaps we can work on this issue offline, if you can send me a PM.

--
Regards,

Ramesh Srinivasan, Microsoft MVP  [Windows Shell/User]
Windows® Troubleshootinghttp://www.winhelponline.com
Winhelponline.com bloghttp://www.winhelponline.com/blog


Hi BGR,
Click to expand...
Have you checked the link I posted earlier? It says to verify if the "logs" folder is present and if it's writable.
Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
Windows® Troubleshootinghttp://www.winhelponline.com
Winhelponline.com bloghttp://www.winhelponline.com/blog
Click to expand...

Ramesh..

Yes have checked and the permissions are OK.....even changed them to
FULL CONTROL to double check.  have even moved the log folder just to
se if Vista recreated it.  Nothing.  BTW my System Restore is also
corrupt and unable to run.  I have a feeling it is all inter-related.

Bgr.
Click to expand...
 
R

Ramesh, MS-MVP

Registry cleaner strikes again! Glad you found the culprit, and thanks for sharing this info..should help others.

--
Regards,

Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
Windows® Troubleshooting http://www.winhelponline.com
Winhelponline.com blog http://www.winhelponline.com/blog



I have found the solution myself via the net. The problem was caused
by JV16 Powertools 2008 by Macecraft. It is a bug in their software.

Installation of the software apparently adds registry keys of which
some are empty. There may be many issues but the key that affects the
event log services is listed below. Removal of this key and a re-boot
should correct the problem. As always take a backup of your registry
before making any changes.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog
\Parameters


Badgeros
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Create System Restore point fails - Vista Home Premium 3
Can't start Event Log Service 4
Failed to Connect to a Windows Service Message 2
svchost.exe(LocalServiceNetworkRestricted) accessing media files 3
Can't start Windows Event Log service 2
How to change location of Vista Event Log file? 3
Event Viewer Error 1
Windows Event Log service crashes, and I can't get the hotfix! 1

Top