Hey I accidentally deleted windows logs I needed but I havent wrote anything to the disk and I have a third party file restore program so I was wondering if anyboddy knew the file extension of windows event logs if it was .doc or .log I can't seem to find what it is with google.
-
possible duplicate of How do I recover or "undelete" files that I accidentally deleted?– James MertzCommented Jan 14, 2013 at 15:39
Add a comment
|
3 Answers
Please try
C:\Windows\System32\config
In this location, they could be .log, .log1, .log2 or no extension.
This is what it looks like for me:
-
Not when you accidentally deleted them, well my system is the equivelent of cooked now because I needed those to fix one hell of a error, thanks anyways for your help. Commented Jan 14, 2013 at 14:29
-
2Those aren't the event logs, they are the registry transaction logs. Commented Jan 14, 2013 at 21:48
-
In Windows XP, event logs have extension .evt and are in
windows\system32\config
In Windows 7, event logs have extension .evtx and are in
windows\system32\winevt\Logs
I believe Windows Vista and Windows 8 are both the same as Windows 7, but I don't have a box handy to check.
answered Jan 14, 2013 at 21:51
-
In Windows Server 2008 R2 Enterprise also is windows\system32\winevt\Logs Commented Nov 21, 2016 at 14:11
-
@HernaldoGonzalez: yeah, Windows Server 2008 R2 is just the server version of Windows 7. Commented Nov 21, 2016 at 20:48
To increase the possibility to find what you are looking for, I suggest to look for
.evtfiles.txtfiles.logfiles
answered Jan 14, 2013 at 14:24
