Event Viewer Redirection Registry Hack
(modified from a registry hack by Gilles Ronsin)

IMPORTANT: This registry modification only works for Windows XP

In Windows XP, for most of the events Event Viewer would add at the end the following sentence:
For more information, see Help and Support Center at http://www.eventid.net/eventviewer.asp.


Fig. 1 - Event properties window

If one clicks on this link, another window will open with information that will be submitted to the site. The main problem is that in 99% of the cases, there is no additional information listed on that web page. The following registry modification will redirect all the requests for http://www.eventid.net/eventviewer.asp to http://www.eventid.net/eventviewer.asp. This page will take the event id and the source and redirect the request to the www.eventid.net search engine. For example, for the event shown above, the final page will be http://www.eventid.net/display.asp?eventid=7035&source=Service%20Control%20Manager

DOWNLOAD: To implement this change download and import the EventViewerRedirect.reg file. Here is the content of the file:

Windows Registry Editor Version 5.00

# Allow to redirect the Windows Event viewer to the site of Event ID

# Author : Gilles Ronsin
# Web site (in French) :http://gilles.ronsin.free.fr/
# Link to the explanations (in French) : http://gilles.ronsin.free.fr/#EventId
# Modified by Adrian Grigorof on October 29, 2004

----------------- cut here ------------------------------------------
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Event Viewer]
"MicrosoftRedirectionProgramCommandLineParameters"="-url hcp://services/centers/support?topic=%s"
"MicrosoftRedirectionURL!"="http://go.microsoft.com/fwlink/events.asp"
"MicrosoftRedirectionURL"="http://www.eventid.net/eventviewer.asp"
"MicrosoftRedirectionProgram!"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d, 00,52,00,6f,00,6f,00,74,00,25,00,5c,00,50,00,43,00,48,00,65,00,61,00,6c,00, 74,00,68,00,5c,00,48,00,65,00,6c,00,70,00,43,00,74,00,72,00,5c,00,42,00,69, 00,6e,00,61,00,72,00,69,00,65,00,73,00,5c,00,48,00,65,00,6c,00,70,00,43,00, 74,00,72,00,2e,00,65,00,78,00,65,00,00,00
"MicrosoftRedirectionProgram"=-
------------------ cut here ----------------------------------------

Featured Links GFI EventsManager - Network-wide event log management - Download free 30-day trial! Free Online Event Scanner - Scan your pc for high security events with GFI's free online service. EventID.Net Subscription - So much information for so little!

Legal - EventID.Net © 2001-2008 Altair Technologies Ltd., All rights reserved - Sign up for our Email Newsletter