3
Hey I accidentally deleted windows logs I needed but I havent wrote anything to the disk and I have a third party file restore program so I was wondering if anyboddy knew the file extension of windows event logs if it was .doc or .log I can't seem to find what it is with google.
user88311
Posted 2013-01-14T14:15:49.753
Reputation: 1 646
3
Please try
C:\Windows\System32\config
In this location, they could be .log, .log1, .log2 or no extension.
This is what it looks like for me:
Dave
Posted 2013-01-14T14:15:49.753
Reputation: 24 199
I never said they were event logs... – Dave – 2016-10-07T11:19:50.297
Not when you accidentally deleted them, well my system is the equivelent of cooked now because I needed those to fix one hell of a error, thanks anyways for your help. – user88311 – 2013-01-14T14:29:11.160
2Those aren't the event logs, they are the registry transaction logs. – Harry Johnston – 2013-01-14T21:48:25.197
4
In Windows XP, event logs have extension .evt and are in
windows\system32\config
In Windows 7, event logs have extension .evtx and are in
windows\system32\winevt\Logs
I believe Windows Vista and Windows 8 are both the same as Windows 7, but I don't have a box handy to check.
Harry Johnston
Posted 2013-01-14T14:15:49.753
Reputation: 5 054
In Windows Server 2008 R2 Enterprise also is windows\system32\winevt\Logs – Hernaldo Gonzalez – 2016-11-21T14:11:55.827
@HernaldoGonzalez: yeah, Windows Server 2008 R2 is just the server version of Windows 7. – Harry Johnston – 2016-11-21T20:48:18.817
2
To increase the possibility to find what you are looking for, I suggest to look for
.evt files.txt files.log files
user1301428
Posted 2013-01-14T14:15:49.753
Reputation: 2 985
possible duplicate of How do I recover or "undelete" files that I accidentally deleted?
– James Mertz – 2013-01-14T15:39:51.687