New
#51
Okay.
The registry step is easy.
Mistakes are not tolerated in the registry.
An extra brand new restore point can be made.
A Macrium backup should have already been made.
This is the registry technique:
https://support.microsoft.com/en-us/...ewer-log-files
The above may not fix the failure to open the event viewer.Code:3/13/2018 21:03 wevtutil.exe : Failed to read events. The event log file is corrupted. At C:\Users\CT\Downloads\resources\main.ps1:175 char:1 + &"$env:SystemRoot\System32\wevtutil.exe" query-events Application /q: ... + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (Failed to read ...e is corrupted.:String) [], RemoteException + FullyQualifiedErrorId : NativeCommandError
So a backup plan is needed.
In the left lower corner search type system > open system control panel > on the left pane click advanced system settings > under startup and recovery system failure > un-check automatically restart
With automatically restart checked you can easily miss BSOD crashes unless there were browsers or work open that was closed by the crash.
Having automatically restart un-checked you will see the BSOD window for each BSOD crash. There can be crashes that are not BSOD crashes and those can still be missed. With a BSOD windows you always want to make sure that you allow it to rise to 100% before closing the window so that there is sufficient time to create the dump file. On the BSOD windows you will also see the bugcheck. Sometimes you may see the misbehaving driver in the form *.sys. If you see a misbehaving driver displayed please record it and post it into the thread.
In order for the settings to fix please reboot and then reopen the startup and recovery system failure settings to confirm that automatically restart is un-checked.
Last edited by zbook; 14 Mar 2018 at 04:39.