Restoring Event Viewer

[AntiPCW]

I seem to have lost my Event Viewer. Every time I try to run it I get a message : 'Event Log service unavailable. Verify that the service is running' but there is no reference to it in the Services. I can see the .exe in Windows/System32 but get the same error message there too. I have also tried this http://social.technet.microsoft.com/Forums/windowsserver/en-US/3f134e80-afde-47fd-a867-4b25c70f50d2/event-log-service-is-unavailable-verify-that-the-service-is-running?forum=winservergen

and got nowhere still. Can anyone help please? Thanks

 

[maxie]

Hi Welcome to Seven Forums ... Run a System scan the Link below will help you achieve this ...

http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

If you have any Restore points i would try that might be the easiest way to resolving your issue ...

 

[HammerHead]

Possible Fix

I repaired my event viewer with this little procedure. The problem you are pointing to could be file corruption.

Step 1: Disable the Event Log Service

a. Right-Click My Computer and chose Manage
b. Expand and locate 'Services and Applications'
c. On the right hand side Double-Click on the 'Event Log'
d. Change the 'Startup Type' to Disabled
e. Reboot computer

Step 2: Rename AppEvent.evt

This file is located in %systemroot%\system32\config

Right-click and rename file to AppEvent.old

Step 3: Re-enable the Event Log Service

a. Right-Click My Computer and chose Manage
b. Expand and locate 'Services and Applications'
c. On the right hand side Double-Click on the 'Event Log'
d. Change the 'Startup Type' to Automatic
e. Reboot computer

 

[AntiPCW]

Hi HammerHead

Thank you for that response.

Unfortunately, at Step c: I do not see an entry for Event Log nor is it listed in the Services drop-down list.

Am trying a Command sfc /scannow.

 

[HammerHead]

Different Way of Finding

Let's try a different path to the services.

Click on start and in the search box type "services" select the icon with the little gear cog. It should present you with a window similar to what I have posted. Then follow the above method. If that doesn't work I have more fixes so hang on. For now lets see if we can find the Event services.

 

[AntiPCW]

Hi HammerHead

Okay, managed to follow your first response and got as far as Step 2. As you can see from the attached image, no sign of AppEvent.evt for me to rename, or do anything with.

Thanks. Awaiting your next tip.

 

[HammerHead]

Procedure Outdated?

I have had that for a long time. Things could have changed. I couldn't find that exact file either. I have attached a pdf that you can read and try. I acquired it when I was working on my event viewer. You will notice a couple of notes I added where there was a command to type. I had to add the command in the note. Read this and post back. It is zipped up.



View attachment Fix Event Log.zip

 

[AntiPCW]

Hi HammerHead

Tried that latest fix with that from that zip file. Went through it meticulously to the letter, still Step 15---no result. Same fault. It looks like a complete OS remaster for me. Thanks for all your help.

 

[HammerHead]

Short On Options

Well I came up short. Sorry

 

[Layback Bear]

Have you been to the Black Viper web site?
Have you ever used Advanced System Care for IObits or any of IObits programs?

Something caused this problem.

 

[AntiPCW]

Yes, I've been using that Black Viper since before Win XP came out, so am very familiar with it. It is what I diligently used to trim a ridiculous 75 Services running to an optimal 35-38. But I made sure Event Viewer was not one of those Services disabled.

And yes, again, I have used Advanced Care System till they kept hiking their renewal prices,and I said no thank you to any more renewals. The only bit of ACS I use is the IOBits Uninstaller.

How does all this sort my issue?

 

[Slartybart]

Any progress on post# 2?

 

[AntiPCW]

Yes, tried that in #2 Post, first. No dice.

 

[Slartybart]

Copy the following line

SC SDSET eventlog DA;;CCLCSWLOCRRC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPWPDTLOCRRC;;;SY)SAU;SA;DCRPWPDTCRSDWDWO;;;WD)(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)

Open an http://www.sevenforums.com/tutorials/783-elevated-command-prompt.html

   Tip

Standard keyboard shortcuts for Copy (Ctrl-C) and Paste (Ctrl-V) shortcuts do not work in Command Prompt.

Enabling the Quick Edit Mode in Command Prompt makes Copy and Paste operations easier.
See step 4 in http://www.sevenforums.com/tutorials/21874-command-prompt-copy-clipboard.html to enable it.

Copy in Command Prompt: highlight the text you want to copy, then press ENTER.
Paste in Command Prompt: right click with your mouse.

​

Paste the clipboard into the Command Prompt Window