0
votes
0answers
5 views

How do I register an event log so that psloglist can access it?

This post is about the new sysmon tool from Sysinternals/Microsoft and the event log as relates to psloglist.exe, also from Sysinternals/Microsoft I'd like to query the sysmon windows event log: ...
0
votes
0answers
26 views

What's the equivalent of Wevtutil in XP or 2003?

I have a batch file for saving event logs to our shared drive. I want to do this for XP and Server 2003 without very much effort. What could I use since Wevtutil is only on Vista and up? rem Script ...
3
votes
0answers
32 views

How does Windows 7 determine that a system was not shut down correctly (Kernel-Power Event ID 41)

I have a strange situation that Windows 7 thinks it was not shut down correctly, and gives me a warning in the system event log like this: http://support.microsoft.com/kb/2028504/de What the ...
1
vote
0answers
15 views

XPath event filter working in Event Viewer but not in Task Scheduler

I'm trying to trigger a scheduled task with this XML: <QueryList> <Query Id="0" Path="Security"> <Select Path="Security"> *[EventData[Data[@Name='TargetInfo']='S']] ...
0
votes
0answers
30 views

Slow startup due to event log

My computer takes roughly 10-15 minutes to startup. I found that if I disable Windows Event Log in msconfig that startup is normal again. This is on windows 7. I am guessing that the event log is ...
0
votes
0answers
36 views

Sudden change of username & password prompt from UAC?

I just recently noticed that my username changed from "Dani" to "daniel" (It's a computer I recently got and haven't gotten around to changing its name.). The name of the PC is still the same ...
1
vote
0answers
88 views

How to detect if I/O errors are because of HDD fail or other Hardware/Software issues?

On my current system I had a 2TB HDD from Segate, after 2 years Windows started to restart on boot, so I formatted and installed ubuntu. All worked great but after a while I would get I/O errors, ...
0
votes
0answers
19 views

Windows Logging Events/Actions - how to/where?

I've known for a while that Windows had this awesome feature where you could see what file was accessed, where and what happened to it. I was wondering if there's a way I could see only a part of ...
0
votes
1answer
45 views

Where to check Windows service startup history

I suspect one of important services did not start properly on last Windows 7 restart. I have searched eventlogs but there is so many places to search. Is there some place in eventlogs where at least ...
5
votes
2answers
118 views

How can I determine who is connected to event log remotely?

Is there a way to figure out which user and/or which computer is remotely accessing my computer's Windows event log files? These accesses are locking applications on the local computer and thereby ...
0
votes
0answers
369 views

Acer Aspire Timeline Ultra M3-581TG Laptop. It turned off automatically without warning

I have a laptop : Acer Aspire Timeline Ultra M3-581TG Laptop, using Windows 7 Home Premium 64 bit, 4GB RAM, Core i5 It turned off automatically without warning. There was no shutdown procedure, ...
2
votes
1answer
28 views

Some sort of bootlog or system info log in Windows 7

I was wondering if there is some sort of "Bootlog" file or anything similar in which I can (at least) see when the computer was booted. So at what date and time that happened. So basically I need a ...
0
votes
1answer
194 views

Process Monitor capture filter (or scripting)

As you know, Microsoft distributes the Russinovich extremely powerful process monitor. It captures a lot of system events and has a filter to show only some of them. I want to record a rare fault at ...
0
votes
0answers
9 views

Eventtrigers on Windows 7 console-based

In my Company I have to set up Event-Triggers. We want to monitor our Event-Logs in a lightweight and easy way. As a Requirement from the management we have to use the System-Tools. So I found the ...
1
vote
1answer
108 views

Windows 7 OK button on Copy To dialog doesn't copy profile

So I am attempting to copy a User Profile to the default profile. I am using WinSpy++ to enable the disabled "Copy To" button - this process works on a stock laptop I have here. However, this does ...
2
votes
1answer
379 views

Windows Event Log SystemTime format

The follwing timestamp was created during an Windows Security Log TimeCreated [ SystemTime] 2013-10-07T07:31:09.122037600Z In this timestamp I can't understand what 122037600Z part means? Do ...
1
vote
0answers
52 views

How to check history of a particular software start and close event on windows7

I have used event viewer to check system log in but how to check if I want to see if someone opened visual studio on system? I think its info should be in event viewer but I am not sure. I have ...
0
votes
2answers
3k views

Name resolution DNS Client Event, DNS servers not responding, with internet disconnects

I have a really small network in my house, with only three computers. Recently I've experienced my computer disconnecting from the internet for 3-5 seconds, and it only happens two or three times a ...
2
votes
2answers
46 views

Figuring out which files where skipped during drag & drop

I just did a drag & drop on a windows system to move a large number of files. During this move there were a few errors involving corrupt files and other issues. Since I was doing this overnight I ...
-1
votes
1answer
29 views

Error installing service, cant access/edit security log? [closed]

I'm trying to install a proprietary service on a client machine and I continue to run into the same issue I've checked all the user permissions even though I'm on an admin account. I also checked ...
2
votes
4answers
2k views

Does Windows log programs that have been run/called?

In Windows, is there a log that records what programs were run/called? While browsing the internet, viewing a static page with no ads, mouse clicks, keypresses, or miscellaneous ...
0
votes
1answer
326 views

Event ID: 7016 LitModeCtrl service has reported an invalid current state 32

I am getting all the time the below error in Windows Event Viewer. Throughout the web a lot of people get this error but there are no solutions to it. I was getting the error when i was using Windows ...
0
votes
2answers
222 views

Lenovo Power Dial Software causing Errors

I am using Windows 7 Professional 64 Bit Lenovo IdeaCentre K330. Recently i checked my Windows Event Viewer and i see that I have got a lot of the following error's: SideBySide Event ID: 33 ...
0
votes
1answer
228 views

Window 7 Event Log Freezing. How to Fix?

When you open the event log, it freeze for several seconds. and a prompt comes out say it's not responding. but if you ignore it and wait for several seconds, it will resume normal. And you will found ...
0
votes
1answer
125 views

Powershell script hogging CPU resources

My computer is a HP laptop running Windows 7 64-bit. A Google search looking for a solution to generate an event in the eventlog any time I switch from AC to battery or vice versa, landed me to: ...
0
votes
1answer
518 views

Windows 7 PC crashes / stops upon reboot

I have an Hewlett Packard (fairly basic) Windows 7 PC, that crashed (no blue screen, the screen simply went black with no response from any peripherals) and then once the machine is powered off and ...
0
votes
2answers
824 views

Log screensaver activity

I'd like to know if there's any way to see logs of the screensaver activity. Something like that: 02/02/2013 10:16:47 Screensaver started 02/02/2013 10:17:23 Screensaver stopped I'm running Win7 ...
1
vote
1answer
495 views

Why does my computer turn itself off?

I have an old laptop with Windows 7 system, and I want to use it as a home server. I put it under a desk, and control it via Remote Desktop Connection on a MacBook Pro. Both the laptop and the macbook ...
0
votes
1answer
114 views

Unique Identifier of an individual event in the system log?

I searched for a specific Event ID (6008 Unexpected Shutdown) in the Windows 7 Event Viewer, but now I want to see the events in the log that led up to that event, so how can I search for that ...
-1
votes
3answers
3k views

How to find the log files of an application in Windows 7

What are the common places to find log files of an application in Windows 7? I know a common place is "C:\Users\MY_USER_NAME\AppData\Local", but there are many folders with encrypted names like ...
1
vote
1answer
623 views

Run a program when USB mass storage device connected [duplicate]

I want to run a program, say a batch file, when any USB mass storage device is connected. I also want to pass the drive letter as a parameter to this batch file. This can perhaps be achieved using ...
3
votes
3answers
762 views

Is there a way to measure an employee's computer usage?

I have been asked to see if a user is being productive. Windows 7 doesnt log much in the way of computer usage, but I was thinking it would be possible to see how long the computer is in a locked ...
2
votes
0answers
279 views

Windows 7 Static IP Logs/History

Is there any way to pull up in the Event Log when a Static IP address was changed and if possible what changes were made? I've run into a problem where someone keeps changing their static IP address ...
0
votes
2answers
1k views

Run a batch file on exiting specific program

I want a batch file to run when I exit a specific program, Nokia Suite in my case. I want to use Windows 7 task scheduler and would prefer avoiding any 3rd party program. I have already checked ...
1
vote
0answers
1k views

Computer Slows to crawl after Event Id 3, some issue with Raid Port 0

Recently my computer randomly hangs, crashes and slows down at night, when I click on something when I wake up the computer just doesn't respond and shows the loading thing for my cursor. Today, I ...
3
votes
2answers
3k views

Windows 7 theme automatically switched from Aero to basic and back. Is there a log for what caused this?

This happened to me yesterday, and I just want to rule out that anything malicious was going on. I should probably also mention that it switched back to Aero after a minute or two. edit: I have ...
1
vote
2answers
5k views

Very infrequent Excel crash

Have 1 user who keeps experiencing an Excel crash when sorting data. It is very infrequent and as of yet i've not done any serious troubleshooting, just an Office repair. Event log reports the ...
1
vote
1answer
136 views

How to determine why Win7 machine is crashing?

When my Windows 7 machine crashes, I can't find any information in the event logs that can help me track down the problem. Is there a setting I can turn on to log more information so I can capture the ...
0
votes
2answers
617 views

What do I have to change to allow a local XP computer to open the event log on a remote windows 7 Computer?

I want to open the event log of a Windows 7 SP1 computer remotely from a Windows XP SP3 computer. Both computers are on a domain, and the user has domain admin privilages. The firewall is turned off ...
4
votes
1answer
5k views

Run program when USB device is plugged in [duplicate]

I'm not talking about autorun (because I use Windows 7 and understand that this has been disabled now) but a task that I can create that will detect when a certain USB device has been plugged in. ...
1
vote
3answers
1k views

VMware Player flooding my event log with information events about “I120: Service being interrogated…”

Every few seconds a few entries of Information Event 1000 shows up in my event log saying vmauthd was the source. Here is the xml log of the event. all the others are identical other than a ...
1
vote
1answer
679 views

NTFS Error - file system structure is corrupt and unusable [duplicate]

Possible Duplicate: windows 7: Event 55 The file system structure on the disk is corrupt and unusable My Windows 7 (64) keeps completely locking up, and I have to hold the power button to ...
0
votes
1answer
7k views

Windows 7 - Move location of Eventlog

I am having a particular nasty problem of my main system drive 'disappearing' all of the sudden while the system is running. The vendor somewhat knows about this but has not managed to fix it ...
7
votes
2answers
36k views

How can I use Event Viewer to confirm login times filtered by User?

I'm required to log my start and finish times at work. Occasionally I forget to do this and had a bright idea that checking the Security events log would allow me to retrospectively ascertain my ...
2
votes
4answers
1k views

How to find out how often my Windows partition has been defragmented?

I know that Windows uses its defrag program to defragment my partition sometimes when my system goes to an idle state. Also, sometimes I used to execute defrag by myself in order to increase ...
2
votes
1answer
2k views

Windows 7 Logon Failure Events Nonexistent?

I have a relatively new Windows 7 Professional 64-bit installation with all patches applied. I'm trying to test logon failure events to see what they look like and how they will look in our log ...
5
votes
4answers
39k views

Turning off windows event log?

The FAQ of GTA IV tells me to turn off Windows Event Log in msconfig. This will handle the game more efficiently. And it does! But turning off windows processes always worries me. So therefore: After ...
0
votes
1answer
423 views

What is the meaning of this warning in windows administrative events - DNS Client Events

Sometimes I open profile of a user and he has write the address of his site there, but I don't remember when was the last time I clicked that address. But I have some warnings in computer ...
16
votes
2answers
9k views

Are USB unplug events logged in Windows 7? (When was my mouse stolen?)

I know this sounds kind of ridiculous, but someone stole my mouse from my cubicle.. I came to work in the morning and was about to give my mouse a little shove to wake up the monitor, but it wasn't ...
2
votes
3answers
11k views

Windows 7: Crashing after update - How to check Event Logs?

My desktop appears to be blue screening and restarting after Win7 hard drive installation. How can I navigate to event viewer in Win 7 and see when was the last time it crashed unexpectedly?