Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

System Logs missing


  • Please log in to reply

#1
knoxmda

knoxmda

    New Member

  • Member
  • Pip
  • 4 posts
:tazz:
I am looking at a computer here that has a block of dates missing in the system log. From 3-03-05 thru 3-22-05 any ideas as to how someone could clean out just part of the log?
  • 0

Advertisements


#2
gerryf

gerryf

    Retired Staff

  • Retired Staff
  • 11,365 posts
The most obvious answer is that there was a problem with either the event log or remote procedure call service during that time, and thus events were not recorded.

Do you suspect skullduggery? I've never given it much thought, but there are 3rd party programs that can read and export the event log...perhaps there is one that can export, edit it, then import it.
  • 0

#3
knoxmda

knoxmda

    New Member

  • Topic Starter
  • Member
  • Pip
  • 4 posts
That is what i'm starting to think, wouldn't i see rpc errors in the event viewer? If it were someone actually deleateing it?
  • 0

#4
gerryf

gerryf

    Retired Staff

  • Retired Staff
  • 11,365 posts
Normally, yes, but given the number of nasty things that have used to RPC service in the past year, it could have been some strange convergence of issues.

Or maybe they didn't turn on their machine for a while?
  • 0

#5
knoxmda

knoxmda

    New Member

  • Topic Starter
  • Member
  • Pip
  • 4 posts
What i though at first yet Symantec antivirus ran everyday. Doesn't it need RPC for it to work. The APP log is complete.
  • 0

#6
gerryf

gerryf

    Retired Staff

  • Retired Staff
  • 11,365 posts
Has anyone run a system restore? Selective Backup?
  • 0

#7
knoxmda

knoxmda

    New Member

  • Topic Starter
  • Member
  • Pip
  • 4 posts
not that i see, win 2000 dont believe it's got a roll back feature. This is a good one, one reason i brought it to this forum
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP