SysEvent.Evt file is corrupted

[Mindstorm]

Dr. Watson Services.exe
Exception: Access Violation (0xc0000005), Address: 0x76e073d4

I am unable to open my Windows Event Viewer and getting the above error message. I think SysEvent.Evt file is corrupted. I am running Windows XP on my computer. How can I fix this error message? Is there any solution or should I install the Windows from scratch?

[Humberto]

The easiest way to fix this problem is, first disable the Event Viewer Service and restart your computer. Now remove the SysEvent.Evt file from C:WINDOWS\system32\config folder. Now enable the Event Viewer service. This should recreate the SysEvent.Evt file once again.

[Dr. V]

To resolve this issue, simply boot from the Windows Recovery Console and rename the Application (appevent.evt), Security (secevent.evt), and System (sysevent.evt) event-log files at C:\Windows\system32\config folder. Now restart your computer and you will find your Windows is working as normal. This generally occurs due to some malware activities affecting the system core files. I would recommend you to use a good antivirus software in order to prevent such problem in the near future.

[Luis234]

NTFS Partition

1. Click on Start button, Settings, Control Panel, and then double-click Services.
2. Select the EventLog service and click Startup. Change the Startup Type to Disabled, and then click OK. If you are unable to log on to the computer but can access the registry remotely, you can change the Startup value in the following registry key to 0x4:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog
3. Restart Windows.
4. Rename or move the corrupt *.evt file from the following location:
%SystemRoot%\System32\Config
5. In Control Panel Services tool, re-enable the EventLog service by setting it back to the default of Automatic startup, or change the registry Startup value back to 0x2.

FAT partition

1. Boot to a MS-DOS prompt using a DOS bootable disk.
2. Rename or move the corrupt *.evt file from the following location:
%SystemRoot%\System32\Config
3. Remove the disk and restart Windows.

When Windows is restarted, the Event Log file will be recreated.