Tracing a CRASH?

[AV1611]

I had a program or something on one of my users computer corrupt a file needed to run. When trying to boot Windows it told me that a system file was corrupt. I didn't write which one down unfortunately and then when I rebooted I couldn't access anything or boot up. As a matter of fact, when I slaved the drive it said the drive wasn't even formatted.

I used a recovery software to retrieve all data and get passed the messed up part of the drive. Is there any way at all I can find out what caused it? Is there any log file or anything that shows what was running when it bit the dust?

Thanks in advance, AV

 

[1stITMAN]

ok you start boot up by pressing F8 then selecting enable bootlogging, then u can see the bootlog file it can be found C:\winnt named ntbtlog.txt

check that out.

 

[AV1611]

Well I used a software to get past the bad sectors on the HD and then copied the contents of the entire HD onto my computer. I then formatted and reinstalled that PC. Is that log on the contents of the HD that I copied out and where can I find it.

Thanks in advance, AV

 

[1stITMAN]

if u have backed up all the computer then yes it will be there. any time u have booted up in safe mode data is written to the log. nbtlog.txt under the winnt folder.