Windows 10: Virus in System32 winevt

Discus and support Virus in System32 winevt in AntiVirus, Firewalls and System Security to solve the problem; Avast in my Win 10 PC is showing threat as in the attached image but not able to resolve. I am even not able to delete this file manually. What is the... Discussion in 'AntiVirus, Firewalls and System Security' started by sam9, Jun 20, 2018.

  1. sam9 Win User

    Virus in System32 winevt


    Avast in my Win 10 PC is showing threat as in the attached image but not able to resolve. I am even not able to delete this file manually. What is the importance of this file. How to delete it.
    Virus  in System32 winevt [​IMG]


    :)
     

  2. Files not opening during virus scan

    While doing a virus scan on my computer, I noticed this in the scan log. My scan overall however says no threats found. Should I be worried?

    Boot sector of disk C: - error opening [4]

    C:\$WINDOWS.~BT\Sources\Panther\diagerr.xml - error opening [4]

    C:\$WINDOWS.~BT\Sources\Panther\diagwrn.xml - error opening [4]

    C:\$WINDOWS.~BT\Sources\Panther\setupact.log - error opening [4]

    C:\$WINDOWS.~BT\Sources\Panther\setuperr.log - error opening [4]

    C:\$WINDOWS.~BT\Sources\Panther\sqmSetup00.sqm - error opening [4]

    C:\$WINDOWS.~BT\Sources\Panther\sqmSetup01.sqm - error opening [4]

    C:\$WINDOWS.~BT\Sources\Panther\windlp.state-old.xml - error opening [4]

    C:\$WINDOWS.~BT\Sources\Panther\windlp.state.xml - error opening [4]

    C:\$WINDOWS.~BT\Sources\SafeOS\winre.wim - error opening [4]

    C:\hiberfil.sys - error opening [4]

    C:\OEM\Preload\EventLog\AUDITALAUNCH.zip - error opening [4]

    C:\OEM\Preload\EventLog\USERALAUNCH.zip - error opening [4]

    C:\PageFile.sys - error opening [4]

    C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\1803bff52aa6bd3ec60cb5326eb4c180_d0b5520e-bac4-427e-91c2-ff9b97f6519e - error opening [4]

    C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f686aace6942fb7f7ceb231212eef4a4_05cb7a58-5da2-4376-b9f5-8604b228e90c - error opening [4]

    C:\ProgramData\Microsoft\User Account Pictures\Administrator.dat - error opening [4]

    C:\swapfile.sys - error opening [4]

    C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\1803bff52aa6bd3ec60cb5326eb4c180_d0b5520e-bac4-427e-91c2-ff9b97f6519e - error opening [4]

    C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\f686aace6942fb7f7ceb231212eef4a4_05cb7a58-5da2-4376-b9f5-8604b228e90c - error opening [4]

    C:\Users\All Users\Microsoft\User Account Pictures\Administrator.dat - error opening [4]

    C:\Users\curlk\AppData\Local\Microsoft\Windows\UPPS\UPPS.bin - error opening [4]

    C:\Windows\Logs\DPX\setupact.log - error opening [4]

    C:\Windows\Logs\DPX\setuperr.log - error opening [4]

    C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe.config - error opening [4]

    C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe.config - error opening [4]

    C:\Windows\Panther\UnattendGC\diagerr.xml - error opening [4]

    C:\Windows\Panther\UnattendGC\diagwrn.xml - error opening [4]

    C:\Windows\Panther\UnattendGC\setupact.log - error opening [4]

    C:\Windows\Panther\UnattendGC\setuperr.log - error opening [4]

    C:\Windows\PLA\System\System Diagnostics.xml - error opening [4]

    C:\Windows\PLA\System\System Performance.xml - error opening [4]

    C:\Windows\security\database\secedit.sdb - error opening [4]

    C:\Windows\System32\Sysprep\Panther\IE\diagerr.xml - error opening [4]

    C:\Windows\System32\Sysprep\Panther\IE\diagwrn.xml - error opening [4]

    C:\Windows\System32\Sysprep\Panther\IE\setupact.log - error opening [4]

    C:\Windows\System32\Sysprep\Panther\IE\setuperr.log - error opening [4]

    C:\Windows\System32\winevt\Logs\AirSpaceChannel.etl - error opening [4]

    C:\Windows\System32\winevt\Logs\Application.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\HardwareEvents.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Internet Explorer.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Key Management Service.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Client-Licensing-Platform%4Admin.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Program-Compatibility-Troubleshooter.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Program-Inventory.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Program-Telemetry.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Steps-Recorder.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-AppLocker%4EXE and DLL.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-AppLocker%4MSI and Script.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-AppModel-Runtime%4Admin.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-AppReadiness%4Admin.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-AppReadiness%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-AppXDeployment%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-AppxPackaging%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Audio%4CaptureMonitor.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Audio%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Audio%4PlaybackManager.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Bits-Client%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-CodeIntegrity%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-DeviceSetupManager%4Admin.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-DeviceSetupManager%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Dhcp-Client%4Admin.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-PCW%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-PLA%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-Scheduled%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Fault-Tolerant-Heap%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-FileHistory-Core%4WHC.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-GroupPolicy%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-HomeGroup Control Panel%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-HotspotAuth%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-IKE%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-International%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-Boot%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-PnP%4Configuration.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-WHEA%4Errors.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-WHEA%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Known Folders API Service.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-LiveId%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-MUI%4Admin.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-MUI%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-NCSI%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-NetworkProfile%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-NlaSvc%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Ntfs%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Ntfs%4WHC.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-PackageStateRoaming%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-PrintService%4Admin.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-PushNotification-Platform%4Admin.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-PushNotification-Platform%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-ReadyBoost%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Regsvr32%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Resource-Exhaustion-Resolver%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-RestartManager%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Security-SPP-UX-Notifications%4ActionCenter.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-SettingSync%4Debug.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-SettingSync%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Shell-ConnectedAccountState%4ActionCenter.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Shell-Core%4ActionCenter.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Shell-Core%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-SmbClient%4Connectivity.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-SMBClient%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-SmbClient%4Security.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-SMBServer%4Audit.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-SMBServer%4Connectivity.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-SMBServer%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-SMBServer%4Security.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-StateRepository%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-StateRepository%4Restricted.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Storage-ClassPnP%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Storage-Storport%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-StorageSpaces-ManagementAgent%4WHC.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Store%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-TaskScheduler%4Maintenance.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-TWinUI%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-User Profile Service%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-UserPnp%4ActionCenter.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-UserPnp%4DeviceInstall.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-VPN%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Wcmsvc%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-WFP%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Windows Defender%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Windows Defender%4WHC.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-WindowsBackup%4ActionCenter.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-WindowsUpdateClient%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-Winlogon%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-WLAN-AutoConfig%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-WMI-Activity%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-WorkFolders%4WHC.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-Windows-WPD-MTPClassDriver%4Operational.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Microsoft-WindowsPhone-Connectivity-WiFiConnSvc-Channel.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\OAlerts.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Security.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Setup.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\System.evtx - error opening [4]

    C:\Windows\System32\winevt\Logs\Windows PowerShell.evtx - error opening [4]

    C:\Windows\WinSxS\amd64_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_10.0.10586.0_none_5db42904e056ea84\dnary.xsd - error opening [4]

    C:\Windows\WinSxS\msil_system.data.sqlxml_b77a5c561934e089_10.0.10586.0_none_e09606995139698a\System.Data.SqlXml.dll » SMARTASSEMBLY » deobfuscated.exe - cannot perform the operation

    C:\Windows.old\ProgramData\Microsoft\Crypto\RSA\MachineKeys\1803bff52aa6bd3ec60cb5326eb4c180_d0b5520e-bac4-427e-91c2-ff9b97f6519e - error opening [4]

    C:\Windows.old\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\1803bff52aa6bd3ec60cb5326eb4c180_d0b5520e-bac4-427e-91c2-ff9b97f6519e - error opening [4]

    C:\Windows.old\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\f686aace6942fb7f7ceb231212eef4a4_05cb7a58-5da2-4376-b9f5-8604b228e90c - error opening [4]

    C:\Windows.old\Users\All Users\Microsoft\User Account Pictures\Administrator.dat - error opening [4]

    C:\Windows.old\Windows\Logs\DPX\setupact.log - error opening [4]

    C:\Windows.old\Windows\Logs\DPX\setuperr.log - error opening [4]

    C:\Windows.old\Windows\Panther\UnattendGC\diagerr.xml - error opening [4]

    C:\Windows.old\Windows\Panther\UnattendGC\diagwrn.xml - error opening [4]

    C:\Windows.old\Windows\Panther\UnattendGC\setupact.log - error opening [4]

    C:\Windows.old\Windows\Panther\UnattendGC\setuperr.log - error opening [4]

    C:\Windows.old\Windows\PLA\System\System Diagnostics.xml - error opening [4]

    C:\Windows.old\Windows\PLA\System\System Performance.xml - error opening [4]

    C:\Windows.old\Windows\security\database\secedit.sdb - error opening [4]

    C:\Windows.old\Windows\System32\restore\MachineGuid.txt - error opening [4]

    C:\Windows.old\Windows\System32\Sysprep\Panther\diagerr.xml - error opening [4]

    C:\Windows.old\Windows\System32\Sysprep\Panther\diagwrn.xml - error opening [4]

    C:\Windows.old\Windows\System32\Sysprep\Panther\IE\diagerr.xml - error opening [4]

    C:\Windows.old\Windows\System32\Sysprep\Panther\IE\diagwrn.xml - error opening [4]

    C:\Windows.old\Windows\System32\Sysprep\Panther\IE\setupact.log - error opening [4]

    C:\Windows.old\Windows\System32\Sysprep\Panther\IE\setuperr.log - error opening [4]

    C:\Windows.old\Windows\System32\Sysprep\Panther\setupact.log - error opening [4]

    C:\Windows.old\Windows\System32\Sysprep\Panther\setuperr.log - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\AirSpaceChannel.etl - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Application.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\HardwareEvents.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Internet Explorer.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Key Management Service.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Client-Licensing-Platform%4Admin.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-AAD%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-All-User-Install-Agent%4Admin.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-AllJoyn%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Anytime-Upgrade-Events%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-AppHost%4Admin.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-AppID%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-ApplicabilityEngine%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Application Server-Applications%4Admin.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Application Server-Applications%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Program-Compatibility-Troubleshooter.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Program-Inventory.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Program-Telemetry.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Steps-Recorder.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-AppLocker%4EXE and DLL.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-AppLocker%4MSI and Script.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-AppModel-Runtime%4Admin.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-AppReadiness%4Admin.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-AppReadiness%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-AppXDeployment%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-AppxPackaging%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-AssignedAccessBroker%4Admin.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Audio%4CaptureMonitor.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Audio%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Audio%4PlaybackManager.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Authentication User Interface%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Backup.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-BitLocker%4BitLocker Management.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Bits-Client%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Bluetooth-BthLEEnum%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Bluetooth-MTPEnum%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-CertificateServicesClient-Lifecycle-System%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-CertificateServicesClient-Lifecycle-User%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-CloudStorageWizard%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-CodeIntegrity%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Compat-Appraiser%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Connected-Search%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-CoreApplication%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-CorruptedFileRecovery-Client%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-CorruptedFileRecovery-Server%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-DAL-Provider%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-DataIntegrityScan%4Admin.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-DataIntegrityScan%4CrashRecovery.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-DateTimeControlPanel%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-DeviceSetupManager%4Admin.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-DeviceSetupManager%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-DeviceSync%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Dhcp-Client%4Admin.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-PCW%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-PLA%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-Scheduled%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-Scripted%4Admin.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-Scripted%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-ScriptedDiagnosticsProvider%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnostics-Networking%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-DiskDiagnostic%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-DiskDiagnosticDataCollector%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-DiskDiagnosticResolver%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-DSC%4Admin.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-DSC%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-EapHost%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-EapMethods-RasChap%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-EapMethods-RasTls%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-EapMethods-Sim%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-EapMethods-Ttls%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-EDP-Audit-Regular%4Admin.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-EDP-Audit-TCB%4Admin.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-EventCollector%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Fault-Tolerant-Heap%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-FileHistory-Core%4WHC.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-FileHistory-Engine%4BackupLog.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-FMS%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Folder Redirection%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Forwarding%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-GenericRoaming%4Admin.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-GroupPolicy%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Help%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-HomeGroup Control Panel%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-HomeGroup Listener Service%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-HomeGroup Provider Service%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-HotspotAuth%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-IdCtrls%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-IKE%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-International%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-International-RegionalOptionsControlPanel%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Iphlpsvc%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-KdsSvc%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-ApphelpCache%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-Boot%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-IO%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-PnP%4Configuration.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-WDI%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-WHEA%4Errors.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-WHEA%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Known Folders API Service.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-LanguagePackSetup%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-LiveId%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-MemoryDiagnostics-Results%4Debug.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Mobile-Broadband-Experience-Parser-Task%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Mobile-Broadband-Experience-SmsRouter%4Admin.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Mprddm%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-MUI%4Admin.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-MUI%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-NcdAutoSetup%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-NCSI%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-NdisImPlatform%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-NetworkLocationWizard%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-NetworkProfile%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-NetworkProvider%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-NetworkProvisioning%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-NlaSvc%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Ntfs%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Ntfs%4WHC.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-NTLM%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-OOBE-Machine-DUI%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-PackageStateRoaming%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-ParentalControls%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Partition%4Diagnostic.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Policy%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-PowerShell%4Admin.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-PowerShell%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-PowerShell-DesiredStateConfiguration-FileDownloadManager%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-PrintService%4Admin.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-PushNotification-Platform%4Admin.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-PushNotification-Platform%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-ReadyBoost%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-ReadyBoostDriver%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Regsvr32%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-RemoteApp and Desktop Connections%4Admin.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-RemoteApp and Desktop Connections%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-RemoteAssistance%4Admin.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-RemoteAssistance%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS%4Admin.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-RemoteDesktopServices-RemoteFX-Synth3dvsc%4Admin.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-RemoteDesktopServices-SessionServices%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Resource-Exhaustion-Resolver%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Resource-Leak-Diagnostic%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-RestartManager%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-RetailDemo%4Admin.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-RetailDemo%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-SearchUI%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Security-Audit-Configuration-Client%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Security-EnterpriseData-FileRevocationManager%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Security-Netlogon%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Security-SPP-UX-GenuineCenter-Logging%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Security-SPP-UX-Notifications%4ActionCenter.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Security-UserConsentVerifier%4Audit.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-SettingSync%4Debug.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-SettingSync%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-SettingSync-Azure%4Debug.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-SettingSync-Azure%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Shell-ConnectedAccountState%4ActionCenter.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Shell-Core%4ActionCenter.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Shell-Core%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-SmartCard-Audit%4Authentication.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-SmartCard-DeviceEnum%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-SmartCard-TPM-VCard-Module%4Admin.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-SmartCard-TPM-VCard-Module%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-SmbClient%4Connectivity.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-SMBClient%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-SmbClient%4Security.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-SMBServer%4Audit.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-SMBServer%4Connectivity.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-SMBServer%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-SMBServer%4Security.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-SMBWitnessClient%4Admin.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-SMBWitnessClient%4Informational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-StateRepository%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-StateRepository%4Restricted.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Storage-ClassPnP%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-StorageManagement%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-StorageSpaces-Driver%4Diagnostic.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-StorageSpaces-Driver%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-StorageSpaces-ManagementAgent%4WHC.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Store%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-SystemSettingsThreshold%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-TaskScheduler%4Maintenance.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-TCPIP%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-ClientUSBDevices%4Admin.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-ClientUSBDevices%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-PnPDevices%4Admin.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-PnPDevices%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-Printers%4Admin.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-Printers%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-RDPClient%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-TWinUI%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-TZSync%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-TZUtil%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-UAC%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-UAC-FileVirtualization%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-User Control Panel%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-User Device Registration%4Admin.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-User Profile Service%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-User-Loader%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-UserPnp%4ActionCenter.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-UserPnp%4DeviceInstall.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-VDRVROOT%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-VerifyHardwareSecurity%4Admin.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-VHDMP%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Volume%4Diagnostic.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-VPN%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-VPN-Client%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Wcmsvc%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-WFP%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Win32k%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Windows Defender%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Windows Defender%4WHC.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-WindowsBackup%4ActionCenter.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-WindowsSystemAssessmentTool%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-WindowsUpdateClient%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-WinINet-Capture%4Analytic.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Winlogon%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-WinRM%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Winsock-WS2HELP%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Wired-AutoConfig%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-WLAN-AutoConfig%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-WMI-Activity%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-WorkFolders%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-WorkFolders%4WHC.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-Workplace Join%4Admin.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-WPD-ClassInstaller%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-WPD-CompositeClassDriver%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-WPD-MTPClassDriver%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-Windows-WWAN-SVC-Events%4Operational.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-WindowsPhone-Connectivity-WiFiConnSvc-Channel.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Microsoft-WS-Licensing%4Admin.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\OAlerts.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Security.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Setup.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\SMSApi.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\System.evtx - error opening [4]

    C:\Windows.old\Windows\System32\winevt\Logs\Windows PowerShell.evtx - error opening [4]

    C:\Windows.old\Windows\WinSxS\amd64_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_10.0.10240.16384_none_d92f025ad0ad01f7\dnary.xsd - error opening [4]
     
    CornellJackson, Jun 20, 2018
    #2
  3. SLI with different cards

    Here is what is did
    step 1:
    Virus  in System32 winevt 1516036961984-png.png




    step 2:
    Virus  in System32 winevt 1516036994068-png.png




    :/ i dont get this doe ?

    okay ive done the same thing as you but i cant put the file back into the folder

    • Copy nvlddmkm.sys in C:\Windows\System32\DriverStore\nv_dispi.inf_amd64_5518e59e8d3b48f4\ to C:\Windows\System32\drivers\ and replace the existing one.
    that thing
     
    gamingturkey1, Jun 20, 2018
    #3
  4. Virus in System32 winevt

    CSRSS @ c/i386

    Tried Nod32.. no help. Will try kaspersky. Will try Norton Corporate Edition Anti-Virus. thanks for suggestion.
     
    HiddenStupid, Jun 20, 2018
    #4
Thema:

Virus in System32 winevt

Loading...
  1. Virus in System32 winevt - Similar Threads - Virus System32 winevt

  2. C:\WINDOWS\system32\cmd.exe pop up virus?

    in Windows 10 Software and Apps
    C:\WINDOWS\system32\cmd.exe pop up virus?: I keep getting a C:\WINDOWS\system32\cmd.exe pop up on my Surface Pro 7 Windows 11, and often Google Chrome crashes after the window pops up. In the window it reads: "ectivetraining.info" with a bunch of numbers following sorry, a screenshot won't upload. I've done a full...
  3. Is this a virus? Has Different system32 folder System32 vs system32.

    in Windows 10 Gaming
    Is this a virus? Has Different system32 folder System32 vs system32.: There is no description on this, so that may mean it is not safe. I disabled it but it says it's running currently. Right clicking then opening the file location takes me to the System32 folder, but I cannot find the lowercase s system32 folder shown under the Command line....
  4. Is this a virus? Has Different system32 folder System32 vs system32.

    in Windows 10 Software and Apps
    Is this a virus? Has Different system32 folder System32 vs system32.: There is no description on this, so that may mean it is not safe. I disabled it but it says it's running currently. Right clicking then opening the file location takes me to the System32 folder, but I cannot find the lowercase s system32 folder shown under the Command line....
  5. Cleanup C:\Windows\System32\winevt\Logs

    in Windows 10 Network and Sharing
    Cleanup C:\Windows\System32\winevt\Logs: Hi,Please confirm if it safe to manually right click and delete the Archive-Security~.evtx files located at C:\Windows\System32\winevt\Logs using Windows 10 Enterprise. A yes or no will suffice and if no please assist with how they can be removed because they take up...
  6. Cleanup C:\Windows\System32\winevt\Logs

    in Windows 10 Gaming
    Cleanup C:\Windows\System32\winevt\Logs: Hi,Please confirm if it safe to manually right click and delete the Archive-Security~.evtx files located at C:\Windows\System32\winevt\Logs using Windows 10 Enterprise. A yes or no will suffice and if no please assist with how they can be removed because they take up...
  7. Cleanup C:\Windows\System32\winevt\Logs

    in Windows 10 Software and Apps
    Cleanup C:\Windows\System32\winevt\Logs: Hi,Please confirm if it safe to manually right click and delete the Archive-Security~.evtx files located at C:\Windows\System32\winevt\Logs using Windows 10 Enterprise. A yes or no will suffice and if no please assist with how they can be removed because they take up...
  8. System32 Virus

    in Windows 10 Gaming
    System32 Virus: Hello, I got a virus from a suspicious site after I tried to install a game on my computer. I disabled windows defender so I could extract the file and then I realized it was a virus.I used windows defender later Malwarebytes in the hope that they would be able to remove the...
  9. System32 Virus

    in Windows 10 Software and Apps
    System32 Virus: Hello, I got a virus from a suspicious site after I tried to install a game on my computer. I disabled windows defender so I could extract the file and then I realized it was a virus.I used windows defender later Malwarebytes in the hope that they would be able to remove the...
  10. System32 Virus

    in AntiVirus, Firewalls and System Security
    System32 Virus: Hello, I got a virus from a suspicious site after I tried to install a game on my computer. I disabled windows defender so I could extract the file and then I realized it was a virus.I used windows defender later Malwarebytes in the hope that they would be able to remove the...

Users found this page by searching for:

  1. %systemroot%\system32\winevt\logs\microsoft-windowsphone-connectivity-wificonnsvc-channel.evtx

    ,
  2. %SystemRoot%\System32\Winevt\Logs\Microsoft-Windows-FileHistory-Engine%4BackupLog.evtx

    ,
  3. WHAT IS WINEVT

    ,
  4. C:\Windows\System32\winevt\Logs\Microsoft-Windows-Storage-ClassPnP%4Operational.evtx,
  5. \system32\winevt,
  6. winevt logs,
  7. virus files in system 32,
  8. %SystemRoot%\System32\Winevt\Logs\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx,
  9. winevt,
  10. system32\svchost.exe k appmodel p,
  11. microsoft-windows-coresystem-smsrouter,
  12. microsoft-windows-applocker%4packaged app-execution.evtx,
  13. %SystemRoot%\System32\Winevt\Logs\Microsoft-Windows-Mobile-Broadband-Experience-SmsApi%4Analytic.etl,
  14. microsoft-windows-partition%4diagnostic