System crash need to get Event Viewer from system.

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

John,

ERD Commander by Winternals comes to mind.

It will boot a non working XP system with functionality such as event
viewer.

-L

"John" <John@discussions.microsoft.com> wrote in message
news:90FF498E-0B0F-46C0-927D-02A2FA741373@microsoft.com...
> Hi, I am trying to recover data for a client. He said that he saw in the
> Event Viewer Security volations. He did not save the viewer as a log file,
> but did not clear them either. Is there some kind of database or file name
> that I could get off the harddrive? He really whats this info to show the
> police.