Event Viewer not running

[mobyduck]

I'm running Vista Business (upgraded from XP Pro) and have noticed that my event viewer has stopped working. It was fine 2 days agao, but now won't start.

I'm getting an Error: 4201 -
The instance name passed was not recognised as valid by a WMI data provider.

I've googled unsuccessfully so far - anybody have any ideas?

Regards

MD

 

[dennygee99]

when you go into the mmc and try to add the snapin what does it say. are you going into the event viewer through the mmc?

 

[linney]

What if anything did you change or do two days ago?

Is System Restore an option for you?

 

[mobyduck]

Hi Chaps,


dennygee99 -

When I go in through the mmc console the error message 'Event log service is unavailable: Verify that the service is running' comes up. If I try to start the service, the error 4201 comes up...

Linney -

I didn't do anything - honest: I know I sound like a user, but I haven't changed anything as far as I'm aware and there don't seem to have been any auto updates either. I've tried a System restore, but no luck there either.

I suspect that a file has got damaged somehow during a shutdown and a rebuild is in order..

Thanks for the help

Regards

MD

 

[linney]

A couple of further things you could try before any rebuild.

How to analyze the log file entries that the Microsoft Windows Resource Checker (SFC.exe) program generates in Windows Vista

http://support.microsoft.com/kb/928228#appliesto

Have you tried running ChkDsk /r or right-click your Drive icon/ Properties/ Tools/ Error Checking. Select both boxes.

SC command.

https://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/sc.mspx?mfr=true

 

[mobyduck]

Hi Linney

Have another start for your vast collection...

Excellent link to the SFC log checker - I'll try it first thing when I get in tomorrow...

Regards

MD

:-D