How to possibly recover windows event log?

Asked By 30 points N/A Posted on -
qa-featured

 

Hello friends,

How to possibly recover windows event log? Is there a way that the user can restore all the important details in the windows event log? I don’t know the process is but I am sure there is a way,  I came to visit techyv to ask some support and assistance regarding this issue. I have to recover windows event log.

Thanks and Regards,

Bryan James.

SHARE
Answered By 0 points N/A #178656

How to possibly recover windows event log?

qa-featured

 

 

Hi, Bryan!

That problem could appear because of bad power unit, capacitors on the motherboard and after incorrect turning off the PC. First you can try to check disc.

For that

Open My computer -> right-click on disc you want to check -> Properties -> Click on Check Now button -> in the window that pops up select “Automatically fix file system errors” and  “Scan for and attempt recovery of bad sectors”.

If you can get an error saying “can't check the disk because it's in use” you can click on “Schedule disk check” to schedule the Chkdsk utility to perform an error check when Windows boots.

Or you can run Chkdsk utility via the command line.

Click on the Start -> type cmd in the command line (click on Run if you don’t see the command line) -> in the window that opens type chkdsk -> type chkdsk c:/f/r (replace c:/ for other disks you want to check) to repair errors and recover bad sectors. If you get a message "Chkdsk cannot run" error, type Y, ChkDsk will run on your next Windows boot.

IMPORTANT: Do not turn your PC off when ChkDsk is running.

If it doesn’t help try the following (but this process is quite complicated)

  1. Create new Restore Point(RP);
  2. Return to the last system condition where Event Log works;
  3. Save Logs to some place in your disc C:. Make sure the rights are “for everyone”;
  4. Return to new RP;
  5. Reboot from your feeder dial into Recovery Console. Enter as Admin and copy Logs into 

C:WINDOWSsystem32configAppEvent.Evt – applications events

C:WINDOWSsystem32configSecEvent.Evt – security events

C:WINDOWSsystem32configSysEvent.Evt – system events

Recovery console works on disc C: only.

  1. Reboot in usual condition.

Regards!

Related Questions