[THIN] Re: Corrupt Application Log
- From: Henry Sieff <hsieff@xxxxxxxxxxxx>
- To: "'thin@xxxxxxxxxxxxx'" <thin@xxxxxxxxxxxxx>
- Date: Tue, 2 Mar 2004 11:01:56 -0600
A) if you wrap your event logs (ie overwrite older entries with newer
entries) corruption can occur. MS CLAIMS this is only a WIn2K SP4 problem,
but I have seen it happen on NT4, Win2K SP1-3. There is supposedly a hotfix
for this (post sp4 only) but I just don't wrap event logs.
B) There could be an application you've installed which has a corrupt event
logging library - this can be painstaking to troubleshoot
C) If malware is attempting to modify the event log's (which is rilly rilly
hard to do) and messes up (I haven't heard of any that do this yet).
D) Other than that, in-place re-install (which pretty much means you should
just fsck it and start over.
Henry
> -----Original Message-----
> From: Minero Hector B DLVA [mailto:MineroHB@xxxxxxxxxxxxx]
> Sent: Tuesday, March 02, 2004 10:21 AM
> To: Thin (E-mail)
> Subject: [THIN] Corrupt Application Log
>
>
> Hi all,
> I have a Windows 2000 server that gets a corrupt application
> event log every
> week. I know how to delete the corrupt file, but what
> could be causing this problem?
>
> Could anyone tell me where to start troubleshooting this?
>
> The server is at SP2, and unfortunately I can't go to SP3 or SP4.
>
> _________________________________
> Hector Minero
> NSWCDD Code K55
> Ph: (540)653-8859
> Fax:(540)653-8575
>
> ********************************************************
> This weeks sponsor triCerat Inc.
> triCerat makes your job easier by offering essential
> applications to eliminate your printing, policy and profile,
> and your application management problems.
> http://www.triCerat.com
> **********************************************************
> Useful Thin Client Computing Links are available at:
> http://thin.net/links.cfm
> ***********************************************************
> For Archives, to Unsubscribe, Subscribe or
> set Digest or Vacation mode use the below link:
> http://thin.net/citrixlist.cfm
>
********************************************************
This weeks sponsor triCerat Inc.
triCerat makes your job easier by offering essential
applications to eliminate your printing, policy and profile,
and your application management problems.
http://www.triCerat.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
Other related posts:
