W2K application log

[a]

Hi
In my Event Viewer->Application Log, there is a red cross mark on it, and
there is a message "Unable to read the contents of this event log." I
believe that the log is corrupted. Is there any way to tell which
application causes this problem? By the way, the some items in the task
scheduler halt by themselves very often. Are they inter-related?
Thanks

 

[NewScience]

There are three event logs associated with the Event Viewer. They are all
located under:

C:\WINNT\system32\config (depending on your Windows System Folder name)

They are:

AppEvent.evt
SecEvent.evt
SysEvent.evt

It sounds like your AppEvent.evt file has been corrupted.
Try rebooting in Safe Mode Command prompt, CD to C:\WINNT\system32\config
and rename the AppEvent.evt file (or all three).

Reboot and Windows will recreate each at startup. You can then remove
later.

The system maybe be having problem each time it tries to write into each of
the logs and maybe thrashing.

 

[Dave Patrick]

The temporary fix;
You might try changing the file properties to "Overwrite as needed"

Then; Control Panel|Administrative Tools|Services|Event Log Service|General,
set the "Startup Type:" to "Disabled" restart the pc, then delete (or move)
the corrupt *.evt file(s) from %windir%\system32\config then set the Event
Log Service "Startup Type:" back to "Automatic", restart for effect.

The more permanent fix;
http://support.microsoft.com/default.aspx?scid=kb;en-us;829246&Product=win2000

--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| Hi
| In my Event Viewer->Application Log, there is a red cross mark on it, and
| there is a message "Unable to read the contents of this event log." I
| believe that the log is corrupted. Is there any way to tell which
| application causes this problem? By the way, the some items in the task
| scheduler halt by themselves very often. Are they inter-related?
| Thanks
|
|