I am currently trying to do cleanup within a vbscript. I am trying to clean up the event log. I want to erase only a few select entries within the log. now using WMI this accesses a lot of calls available from the Win API. I have found that by no suprise windows has locked out this ability. I have tried finding out the current size of the log, resetting the max to this size then tell the log to delete entries only if they are over 2 years old. Now even when I do this logging still happens. The only calls I can make or settings adjusted are

Call BackupEventLog   (useless)
Call ClearEventLog     (useless... overkill)

Set MaxFileSize
Set OverwriteOutDated

tried messing with the sets but didn't work out afterall, I could set them, but it kept on logging.

Does anyone have some insight on tools or methods for event log cleanup.

Thanks!!

Dean,

Thanks for the post. WinZapper didn't help much because it won't run on XP/2k3 Server. I checked in Olly to see what it is doing, it does an OS check right off the bat and exits. I am not great in the reversing world and figured a lot has changed on the API from NT4 and 2K so I didn't want to mess with it.

Windows has the event log locked down to where if the service is stopped your system restarts.

Thanks for the post, anyone else have any ideas

-Paul