Event viewer empty on server

[gbl]

One of our windows 2000 servers has a problem with event viewer. The system events listing is empty even though it shows 2503 items, and the Application and Security logs continuously show zero items. Unfortunately I cannot identify what event or caused this to happen but it persists after rebooting the computer. I am estimating it has been this way for 3 weeks.
Windows 2000 server with SP4, running terminal services with Citrix Metaframe XPS FR2.
Any help would be greatly appreciated.

 

[pgoss]

under services disable Event log. Start - run - services.msc

You will then have to reboot your system

Do a search for *.evt, and delete sysevent.evt, secevent.evt, and appevent.evt or add.old to the end, if you are not so sure about deleting.

They are located %SystemRoot%\Winnt\System32 \config\<file>.evt

Go back to Services and restart Event log and set to Automatic. You should be good to go

 

[sbasilic]

I had the same problem. Viruses caused it. look in the registry under software/microsoft/windows/currentversion/run or runonce these keys should be empty except for the default.