Event Viewer Problem due to Registry Problem

Irwin Greenwald · External Since: Oct 09, 2009 Posts: 7

I inadvertently clobbered an unknown registry entry and there were no
backups available prior to that event. The problem:

Events are being recorded but not displayed in Event Viewer until the
computer is restarted. Does anyone know what Registry entry (or
entries) control this and what values it should have?

Irwin

Dave Patrick · External Since: Oct 18, 2005 Posts: 3525

What operating system?

--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

"Irwin Greenwald" wrote:
>I inadvertently clobbered an unknown registry entry and there were no
> backups available prior to that event. The problem:
>
> Events are being recorded but not displayed in Event Viewer until the
> computer is restarted. Does anyone know what Registry entry (or
> entries) control this and what values it should have?
>
> Irwin

Irwin Greenwald · External Since: Oct 09, 2009 Posts: 7

Windows XP SP3

On 10/10/2009 3:25 AM, Dave Patrick wrote:
> What operating system?
>
>

Dave Patrick · External Since: Oct 18, 2005 Posts: 3525

Which event log key is damaged?

--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

"Irwin Greenwald" wrote:
> Windows XP SP3

Irwin Greenwald · External Since: Oct 09, 2009 Posts: 7

I'm not sure I understand your question, but...
The Application and System logs do not display until the computer is
restarted. The Security log appears to be OK.

On 10/11/2009 8:02 AM, Dave Patrick wrote:
> Which event log key is damaged?
>
>

Dave Patrick · External Since: Oct 18, 2005 Posts: 3525

What does this mean, it works for a while and quits? How did you determine
the registry was damaged?

--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

"Irwin Greenwald" wrote:
> I'm not sure I understand your question, but...
> The Application and System logs do not display until the computer is
> restarted. The Security log appears to be OK.

Irwin Greenwald · External Since: Oct 09, 2009 Posts: 7

(1) I open the event logs and clear them. The Security logs display new
entries continuously.
(2) I Start a few programs. The Application and System logs display
nothing.
(3) I shut down the machine with "Restart"
(4) I open the event logs. The Application and System logs display all
kinds of entries from the previous session. As I go about opening and
working on different tasks nothing is added to the Application and
System log displays.

On 10/11/2009 2:32 PM, Dave Patrick wrote:
> What does this mean, it works for a while and quits? How did you
> determine the registry was damaged?
>
>

Irwin Greenwald · External Since: Oct 09, 2009 Posts: 7

I am not using PRO if that is important.

On 10/11/2009 3:06 PM, Dave Patrick wrote:
> I just created a Windows XP Pro SP3 vm image and exported the entire key
> HKLM\SYSTEM\CurrentControlSet\Services\Eventlog
>
>
>

Irwin Greenwald · External Since: Oct 09, 2009 Posts: 7

I know the registry was damaged because I damaged it! I didn't have
sense enough to record the strange thing I saw.

On 10/11/2009 2:32 PM, Dave Patrick wrote:
> What does this mean, it works for a while and quits? How did you
> determine the registry was damaged?
>
>

Dave Patrick · External Since: Oct 18, 2005 Posts: 3525

Here is probably your safest bet.

http://support.microsoft.com/kb/315341

If your installation media does not contain SP3 then you'll need to create
an integrated install point to which you can run the repair from. The
article describes SP2 but follow the same steps for SP3

http://support.microsoft.com/kb/900871

--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

"Irwin Greenwald" wrote:
>I am not using PRO if that is important.

Irwin Greenwald · External Since: Oct 09, 2009 Posts: 7

Looks a bit scary, but I'll check it further. Thanks for your help.

On 10/11/2009 4:46 PM, Dave Patrick wrote:
> Here is probably your safest bet.
>
> http://support.microsoft.com/kb/315341
>
> If your installation media does not contain SP3 then you'll need to
> create an integrated install point to which you can run the repair from.
> The article describes SP2 but follow the same steps for SP3
>
> http://support.microsoft.com/kb/900871
>
>
>

Dave Patrick · External Since: Oct 18, 2005 Posts: 3525

You're welcome.

--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

"Irwin Greenwald" wrote:
> Looks a bit scary, but I'll check it further. Thanks for your help.