following steps: Step 2: restart the system When the blue alarm window appears, we should first consider restarting the system. In most cases, the problem can be solved after the system is restarted. However, in this case, you cannot use "CTRL + ALT + DEL" to perform hot start. Instead, you can only press the reset button to perform cold start, or simply restart the instance after power failure. When you enter the system,Control Panel → management tools → Event Viewer", Or type"
. First of all, we will eliminate the cause of the virus, and then we can proceed with the following steps:
Step 2: restart the system
When the blue alarm window appears, we should first consider restarting the system. In most cases, the problem can be solved after the system is restarted. However, in this case, you cannot use "CTRL + ALT + DEL" to perform hot start. Instead, you can only press the reset button to perform cold start, or simply restart the instance after power failure.
compatibility list. In addition, if the motherboard BIOS does not support a large-capacity hard disk, blue screen may occur and you need to upgrade it.
TIPS:
BIOS cache and ing items
Video BIOS Shadowing (Video BIOS ing)
Shadowing address ranges (ing address column)
System BIOS Cacheable (System BIOS buffer)
Video BIOS Cacheable (Video BIOS buffer)
Video RAM Cacheable (Video memory buffer)
6. Check System Logs
Enter EventVwr In the start --> menu.
message box on Server 2.
Implementation process:
1. Create a custom View
Log on to the server as an administrator, click Start> run, and enter eventvwr. msc to open the Event Viewer window. In the left pane, select "Custom View" and click "create custom View" in the "operations" menu. On the "filter" tab page in the "create custom View" Wizard window, set "record time" to "past 24 hours" and "event level"
Start -- run -- eventvwr. MSC to view System Event Logs
Unable to create ApplicationProgramDomain error: 0x80070005Search Procedure:1. Register IIS againRun aspnet_regiis.exe in net \ framework \ v2.0.50727.Uninstall aspnet_regiis.exe-U and reinstall aspnet_regiis.exe-I2. Check whether the Asp.net version selected is 2.0 for the attribute setting of the virtual directory.3. Check permissions1. application
Http://hi.baidu.com/when_love/blog/item/e12db9daec616bd1b7fd48fa.htmlThe following method is found to view Windows logs. It has been verified.
Reprinted -->In the "Start" menu, enter "eventvwr. MSC, open the Event Viewer, and select System in the left-side window ", find events with event ID 6005 and 6006 from system events on the right (events with event ID 6005 indicate that the event log service has bee
What should I do if the blue screen of Win7 system prompts code 0x00000116?The blue screen is one of the common system faults. When a user prompts "0x00000116" in the flagship version of Win7, the user also prompts "igdkmd32.sys". What should I do? Don't worry. The following describes the specific solution.Update the matching graphics card driver (not the latest but the latest ). You can also upgrade the BIOS. At this time, you may wish to use the drive CD that comes with the purchase to re-upda
.CompMgmtLauncher: Computer Management
13.compmgmt.msc: Computer Management
14.credwiz: Backs up or restores stored user names and Passwords
15.comexp.msc: Open System Component Services
16.control: Control surface version
17.DCOMCNFG: Open System Component Services
18.DCCW: Display Color Calibration
19.devmgmt.msc: Device Manager
20.DESK.CPL: Screen resolution
21.dfrgui: Optimizing Drive Windows 7→dfrg.msc: Disk Defragmenter
22.dialer: Phone Dialing program
23.diskmgmt.msc: Disk Mana
Services
18.DCCW: Display Color Calibration
19.devmgmt.msc: Device Manager
20.DESK.CPL: Screen resolution
21.dfrgui: Optimize drive windows7→dfrg.msc: Disk Defragmenter
22.dialer: Phone Dialing program
23.diskmgmt.msc: Disk Management
24.dvdplay:dvd player
25.DXDIAG: Check DirectX Information
26.eudcedit: Word-formation program
27.EVENTVWR: Event Viewer
28.explorer: Open Explorer
29.firewall.cpl:windows Firewall
30.FXSCOVER: Fax Cover Pa
Manager
Desk.cpl: Screen resolution
Dfrgui: Optimizing Drives Windows 7→dfrg.msc: Disk Defragmenter
Dialer: Phone Dialer
Diskmgmt.msc: Disk Management
Dvdplay:dvd player
DxDiag: Checking DirectX information
Eudcedit: The process of word-formation
EVENTVWR: Event Viewer
Explorer: Open Explorer
Firewall.cpl:Windows Firewall
Fxscover: Fax Cover Page Editor
Fsmgmt.msc: Shared Folder Manager
Gpedit.msc: Group Policy
Hdwwiz.cpl: Device Manage
Winver---check w indows Version Sfc/scannow---Electronic scan mistakes and restore taskmgr---Task Manager (2000/xp/2003 winver---Check Windows version wmimgmt.msc--to open the Windows Management System layout ( WMI) Wupdmgr--windows Update wscript--windows Script Host settings write--WordPad winmsd---System Information wiaacmgr---Electronic scanner and camera guide winchat--xp own LAN chat China webmaster Information Network mem.exe-- Display memory usage Msconfig.exe---system layout utility mp
This article describes the running mode, log type, and Event Type of the Event Viewer. In this article, we will provide an Event Viewer instance for maintaining server security. We believe it will be of reference and value for security maintenance personnel to maintain the system.
1. Open and view three types of logs in the Event Viewer
In "run", enter "eventvwr. msc directly opens the Event Viewer, click s
problems, check and upgrade the BIOS to the latest version, and disable memory related items,
For example: cache and ing. In addition, check your hardware against the Microsoft hardware compatibility list. Also, if the motherboard BIOS does not have
Large-capacity hard disks can also lead to blue screens, which need to be upgraded.┌ ── ─│ Tips: ││ BIOS cache and ing items ││ Video BIOS Shadowing (Video BIOS ing) ││ Shadowing address ranges (ing address column) ││ System BIOS Cacheable (System B
screen and need to be upgraded.
6. Run "sfc/scannow" to check whether the system file is replaced, and then use the system installation disk to restore it.
TIPS:
BIOS cache and ing items
Video BIOS Shadowing (Video BIOS ing)
Shadowing address ranges (ing address column)
System BIOS Cacheable (System BIOS buffer)
Video BIOS Cacheable (Video BIOS buffer)
Video RAM Cacheable (Video memory buffer)
7. Check System Logs
Enter EventVwr In the start --> menu
[Who logged on to my computer? How to view Windows event logs?
Source: Data Security and forensics (ID: Cflab_net)
Original: Wendy
In addition to your Mac laptop, Wendy also has a Windows desktop. There is nothing to do with your laptop, but recently I feel that every time I open a Windows desktop at work, it is different from the time I left the previous day! However, it is not good to ask questions everywhere. You only need to do it yourself ?.
Fortunately, it is not difficult. If you have
on the client to encrypt the shared documents on the remote server.
The error is returned in Figure 1. At this time, we may wish to go to the file server to see if there is any relevant information.
Run eventvwr. msc on the file server to open the Event Viewer. An error message is displayed:
Figure 3
This is because EFS does not support the NTLM authentication protocol, but can only use the Kerberos proto
Web logs are an important basis for determining server security. They can be used to analyze and determine whether a server is intruded, and use them to perform reverse tracking on attackers. Therefore, Web Log attackers tend to remove logs quickly.I. Common tactics for attackers to clear logs1,WebLogs in the server systemTake a Web Server on Windows Server 2003 as an example. Its logs include security logs, system logs, application logs, WWW logs, and FTP logs. For the first three types of logs
Recently, my friend said that the system has collapsed and he quickly took a disk and started to reload it.
BiOS settings, optical drive startup, restart, enter the installation interface, and start installation .... Ten minutes later, the installation is complete. After entering the desktop, insert a mobile hard disk and refresh the desktop. Crash .. On the blue screen, the code is 0x00000a. After the restart, the problem still appears after a short time. I asked a friend, but this computer has
Logparser is used to analyze Windows system logs.
For collected logs, there is a column named [eventtype], because it is unclear how many types of [eventtype] actually exist, but it is not found on the Internet, later, I found the relevant information through Microsoft's help documentation and made a small arrangement here.
There are five types of Windows events: Error Event, warning, information event, and success Audit Event ); failed audit (failure Audit event ).
The corresponding [event
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.