Event Viewer Properties Page Will Not Display

Event viewer will not display the details of any event but it does properly
display the event itself in the right hand pane.

The first time I try to view an event's properties with a double click or by
viewing properties from the event's local menu, a window flickers briefly --
as if the properties window opens and then closes. Subsequent launches of an
event's properties do nothing, not even the flicker. However when I export
the log as tab delimited, the event details are contained in the exported
file.

This started happening on a Thinkpad T42, running Windows XP SP2 after
applying Microsoft and Lenovo updates.

Suggestions welcome.

"docedoc" wrote:

> Event viewer will not display the details of any event but it does properly
> display the event itself in the right hand pane.
>
> The first time I try to view an event's properties with a double click or by
> viewing properties from the event's local menu, a window flickers briefly --
> as if the properties window opens and then closes. Subsequent launches of an
> event's properties do nothing, not even the flicker. However when I export
> the log as tab delimited, the event details are contained in the exported
> file.
>
> This started happening on a Thinkpad T42, running Windows XP SP2 after
> applying Microsoft and Lenovo updates.
>
> Suggestions welcome.

Hi,
It could be because the Event Log is corrupted, so try to clear it.
Fix Corrupt Event Log Files
http://technet.microsoft.com/en-us/l.../bb457024.aspx

How to Delete Corrupt Event Viewer Log Files
http://support.microsoft.com/kb/172156
"The Event Log File Is Corrupt" Error Message When Opening an Event Log File
http://support.microsoft.com/kb/255861
HTH.
nass
----
http://www.nasstec.co.uk

Thanks for the suggestion. I disabled Event Log service, deleted all four
event log files, rebooted, and reenabled the Event Log service. The problem
is unchanged.

I should mention that I found a description of the problem I'm having on the
web in a series of posts dated 2005 -- wish I had saved the url and wish they
had resolved the problem.

I'm surfing for a how to about reregistering the Event Log and EvtEng
..dll's, think that that might help.

Additional suggestions?


> Hi,
> It could be because the Event Log is corrupted, so try to clear it.
> Fix Corrupt Event Log Files
> http://technet.microsoft.com/en-us/l.../bb457024.aspx
>
> How to Delete Corrupt Event Viewer Log Files
> http://support.microsoft.com/kb/172156
> "The Event Log File Is Corrupt" Error Message When Opening an Event Log File
> http://support.microsoft.com/kb/255861
> HTH.
> nass
> ----
> http://www.nasstec.co.uk
>

Here's a bit more information about the problem.

Viewing properties for any event produces only a flicker. Viewing properties
for any event a second time displays the Information Properties window with
the message : "No properties are available on this object."

Searching for "No properties are available on this object." shows that the
problem has been around since 2004 but I can find no definitive solutions.
Many responses suggest infection by malware based on the idea that disabling
event log would be a typical strategy to disguise infection.

The pc shows no other symptoms and Kaspersky V7 does not find problems.

Other than format and reinstall, any suggestions?

Try deleting the Event Log and see if it corrects the problem. Make
sure that you set the Event Log options to "Overwrite events as needed".
You have to set the overwrite option for all logs individually,
Application/Security/System, it isn't a global option.

http://support.microsoft.com/kb/172156/en-us

John

docedoc wrote:

> Here's a bit more information about the problem.
>
> Viewing properties for any event produces only a flicker. Viewing properties
> for any event a second time displays the Information Properties window with
> the message : "No properties are available on this object."
>
> Searching for "No properties are available on this object." shows that the
> problem has been around since 2004 but I can find no definitive solutions.
> Many responses suggest infection by malware based on the idea that disabling
> event log would be a typical strategy to disguise infection.
>
> The pc shows no other symptoms and Kaspersky V7 does not find problems.
>
> Other than format and reinstall, any suggestions?
>
>

Event logs have been deleted and all four logs have Overwrite events as
needed option enabled. No difference in the problem's symptoms.

Running System File Checker (Start > Run > scf /scannow) cured the problem.
There was no evidence of malware infection so I suspect the problem was due
to a a corrupt file.

Oops, the command was actually sfc /scannow rather than scf /scannow

"docedoc" wrote:

> Running System File Checker (Start > Run > scf /scannow) cured the problem.
> There was no evidence of malware infection so I suspect the problem was due
> to a a corrupt file.

To fix this problem make sure this file is present. If not, copy it from
a working system running the same version of Windows with the same
service pack.

c:\windows\system32\RICHED32.DLL

The one I use which works on XP professional SP2 has:
date 4 Aug 2004
size 3,584


--
wpyung