locked
Windows Live One Care On-Line Log Reader RRS feed

  • Question

  • Hello All,

    We have a user who's laptop can heavily infected with either a worm or virus. He managed to save the Log files before formatting his machine. Now he wants to read those log files to see what they say. What application, other then re-installing FF can read them ??

    Any help would be greatly appreciated.


    Thanks,
    Tomas
    Thursday, April 23, 2009 8:05 PM

Answers

  • The files that are binary cannot be read. They were not designed to be reviewed by the end user and there is no tool available. had OneCare been on the PC with the logs, prior to the format/reinstall, creating the "support log" report from within OneCare would have yielded a readable report that opens in the web browser.
    Since the machine has been formatted, there really isn't any reason to do forensics at this point since the ultimate cleaning was performed.
    -steve
    Microsoft MVP Windows Live / Windows Live OneCare & Live Mesh Forum Moderator
    • Marked as answer by tulbrich Monday, April 27, 2009 6:33 PM
    Monday, April 27, 2009 4:02 PM
    Moderator
  • What log files are you referring to? The logs can be opened in any text editor. If the user created the OneCareSupport.Zip file, some of the files will not be readable. The logs will be. The .zip file can be opened with WinZip or other 3rd party compression tool.
    -steve
    Microsoft MVP Windows Live / Windows Live OneCare & Live Mesh Forum Moderator
    Friday, April 24, 2009 1:15 PM
    Moderator

All replies

  • What log files are you referring to? The logs can be opened in any text editor. If the user created the OneCareSupport.Zip file, some of the files will not be readable. The logs will be. The .zip file can be opened with WinZip or other 3rd party compression tool.
    -steve
    Microsoft MVP Windows Live / Windows Live OneCare & Live Mesh Forum Moderator
    Friday, April 24, 2009 1:15 PM
    Moderator
  • Sadly, he saved the OneCareSupport.zip file. And opening it with a text editor doesn't give me much information. Is there an application or site I can use to make the contents more readable? Or am I just plain out of luck ???
    Monday, April 27, 2009 2:56 PM
  • The files that are binary cannot be read. They were not designed to be reviewed by the end user and there is no tool available. had OneCare been on the PC with the logs, prior to the format/reinstall, creating the "support log" report from within OneCare would have yielded a readable report that opens in the web browser.
    Since the machine has been formatted, there really isn't any reason to do forensics at this point since the ultimate cleaning was performed.
    -steve
    Microsoft MVP Windows Live / Windows Live OneCare & Live Mesh Forum Moderator
    • Marked as answer by tulbrich Monday, April 27, 2009 6:33 PM
    Monday, April 27, 2009 4:02 PM
    Moderator
  • Thank you Stephen.
    Monday, April 27, 2009 6:33 PM