3

Hey I accidentally deleted windows logs I needed but I havent wrote anything to the disk and I have a third party file restore program so I was wondering if anyboddy knew the file extension of windows event logs if it was .doc or .log I can't seem to find what it is with google.

3

Please try

C:\Windows\System32\config

In this location, they could be .log, .log1, .log2 or no extension.

This is what it looks like for me:

enter image description here

| improve this answer | |
  • Not when you accidentally deleted them, well my system is the equivelent of cooked now because I needed those to fix one hell of a error, thanks anyways for your help. – user88311 Jan 14 '13 at 14:29
  • 2
    Those aren't the event logs, they are the registry transaction logs. – Harry Johnston Jan 14 '13 at 21:48
  • I never said they were event logs... – Dave Oct 7 '16 at 11:19
4

In Windows XP, event logs have extension .evt and are in

windows\system32\config

In Windows 7, event logs have extension .evtx and are in

windows\system32\winevt\Logs

I believe Windows Vista and Windows 8 are both the same as Windows 7, but I don't have a box handy to check.

| improve this answer | |
  • In Windows Server 2008 R2 Enterprise also is windows\system32\winevt\Logs – Hernaldo Gonzalez Nov 21 '16 at 14:11
  • @HernaldoGonzalez: yeah, Windows Server 2008 R2 is just the server version of Windows 7. – Harry Johnston Nov 21 '16 at 20:48
2

To increase the possibility to find what you are looking for, I suggest to look for

  • .evt files
  • .txt files
  • .log files
| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.