Solution for reporting log file damage during system startup

Source: Shadow0KinGs Technique BloG

If the event viewer reports that log files are damaged during system startup, you can take the following remedial measures:

1. Disable Event Log service and restart the system.

2. delete the damaged Log File appevent from the directory % systemroot % system32config. evt, secevent. evt, sysevent. evt. (secevent. evt, sysevent. evt may coexist or only have one). In this way, all existing event data will be lost, however, the new log file will be created when the event log service restarts and start to collect new event data.

3. restart Event Log service and restart the system

OK! Now the event log file has been repaired! No error reports will be reported when you start the system!