Search:

I must have been hackered since this part doesn't sound like me at all.

Anyways, some clarification:

I believe the event log is saved:
%SystemRoot%\system32\winevt\Logs\Application.evtx...

I know its an old topic, but it was 1st on google so I figured I'd pay it forward here.

I ran across the here:

Basically I booted up with Knoppix & emailed the Application event log to myself....