Event viewer works very eratically- invisible until refreshed

[Creed]

I am running a windows 2000 server. I have 2 servers in
my domain. The event viewer in each of my servers seems
to be failing. When you bring up the event viewer all
logs show 0 events. If you refresh the log, then the
events show up. You can view event log for the following
areas- Apllication, Security, Directory,DNS, & File
Replication. If you toggle back and forth between any of
these logs, everything looks and acts normal. However,
when you click on the System log, it indicates that there
are 2,621 events. On the RH side of the screen, nothing
is visible. If you click on the RH side of the screen,
it highlights an area that represents an event, but the
screen is blank. Also, as soon as you click on the
System Log, the other ones go back to 0 events and must
be refreshed again to see the actual events. I tried to
export the system log to a file and the file is empty. I
reloaded windows 2000 service pack4 and defragged too.
When I did the service pack, I got an error that said the
event couldn't be registered in the event log. Sevice
pack and defragging didn't do a thing.

Could this problem be related to the acitve directory
being corrupt or a virus?

 

[dcdon]

There have been several with the problem recently, including myself. I asked
Dav Patrick to give me a hand. He recommended deleting the corrupted
files.This is what he said.


How to delete Event Viewer corrupt files and recreate them
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯

Delete present Application,Security, and System files
Delete - Go to: Control Panel > Administrative Tools > Services > Event Log
Service > General
Set the "Startup Type:" to "Disabled"
Restart the pc
Delete the corrupt *.evt file(s) (Application,Security,
and/or System)
located: %windir%\system32\config (like
C:\winnt\system32\config\ (i.e. System.evt)
Reset the Event Log Service "Startup Type:" back to
"Automatic"
Restart to take effect.


don,
-------
Please give your accolades to Dave Patrick, who so graciously showed me how
to do this.

=========================================


I am running a windows 2000 server. I have 2 servers in
my domain. The event viewer in each of my servers seems
to be failing. When you bring up the event viewer all
logs show 0 events. If you refresh the log, then the
events show up. You can view event log for the following
areas- Apllication, Security, Directory,DNS, & File
Replication. If you toggle back and forth between any of
these logs, everything looks and acts normal. However,
when you click on the System log, it indicates that there
are 2,621 events. On the RH side of the screen, nothing
is visible. If you click on the RH side of the screen,
it highlights an area that represents an event, but the
screen is blank. Also, as soon as you click on the
System Log, the other ones go back to 0 events and must
be refreshed again to see the actual events. I tried to
export the system log to a file and the file is empty. I
reloaded windows 2000 service pack4 and defragged too.
When I did the service pack, I got an error that said the
event couldn't be registered in the event log. Sevice
pack and defragging didn't do a thing.

Could this problem be related to the acitve directory
being corrupt or a virus?

 

[dcdon]

BTW, sometimes I rename a file by dropping the dot for the extension, and
placing ".old"(w/o quotes)(with the dot), after nothing goes wrong, do a
search for *.old and delete the files after a few days. Microsoft does this
too, so don't delete anything you're not sure of.
You also could use .don or .tom or .creed.

don
-----



There have been several with the problem recently, including myself. I asked
Dav Patrick to give me a hand. He recommended deleting the corrupted
files.This is what he said.


How to delete Event Viewer corrupt files and recreate them
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯

Delete present Application,Security, and System files
Delete - Go to: Control Panel > Administrative Tools > Services > Event Log
Service > General
Set the "Startup Type:" to "Disabled"
Restart the pc
Delete the corrupt *.evt file(s) (Application,Security,
and/or System)
located: %windir%\system32\config (like
C:\winnt\system32\config\ (i.e. System.evt)
Reset the Event Log Service "Startup Type:" back to
"Automatic"
Restart to take effect.


don,
-------
Please give your accolades to Dave Patrick, who so graciously showed me how
to do this.

=========================================


I am running a windows 2000 server. I have 2 servers in
my domain. The event viewer in each of my servers seems
to be failing. When you bring up the event viewer all
logs show 0 events. If you refresh the log, then the
events show up. You can view event log for the following
areas- Apllication, Security, Directory,DNS, & File
Replication. If you toggle back and forth between any of
these logs, everything looks and acts normal. However,
when you click on the System log, it indicates that there
are 2,621 events. On the RH side of the screen, nothing
is visible. If you click on the RH side of the screen,
it highlights an area that represents an event, but the
screen is blank. Also, as soon as you click on the
System Log, the other ones go back to 0 events and must
be refreshed again to see the actual events. I tried to
export the system log to a file and the file is empty. I
reloaded windows 2000 service pack4 and defragged too.
When I did the service pack, I got an error that said the
event couldn't be registered in the event log. Sevice
pack and defragging didn't do a thing.

Could this problem be related to the acitve directory
being corrupt or a virus?