D
Dennis
W2K Server SP4, After an attempted attack on the server
via FTP logins, My event logs will not display in the
event viewer. The attack failed to compromise the server
in any way. However, I am still highly suspicious of the
event log problem happening around the same time. Here are
the specifics.
All the logs are still there and continue to be modified
by the system. If I open event viewer to view the logs
nothing displays. The scrollbar allows me to scroll as if
something is there but it is nothing but white space. I
can even highlight each individual line. I copied the
AppEvent.evt to another machine and viewed it in UltraEdit
and can see the data on the right hand side. The log file
could be corrupted but wouldn't the system be unable to
continue writing data to the file? Is it possible that the
els.dll file has been corrupted?
Any help would be greatly appreciated.
p.s. I do not have a problem shooting over a screen grab
of the issue.
via FTP logins, My event logs will not display in the
event viewer. The attack failed to compromise the server
in any way. However, I am still highly suspicious of the
event log problem happening around the same time. Here are
the specifics.
All the logs are still there and continue to be modified
by the system. If I open event viewer to view the logs
nothing displays. The scrollbar allows me to scroll as if
something is there but it is nothing but white space. I
can even highlight each individual line. I copied the
AppEvent.evt to another machine and viewed it in UltraEdit
and can see the data on the right hand side. The log file
could be corrupted but wouldn't the system be unable to
continue writing data to the file? Is it possible that the
els.dll file has been corrupted?
Any help would be greatly appreciated.
p.s. I do not have a problem shooting over a screen grab
of the issue.