BrianDrab Administrator, Windows Update Instructor, Security Analyst Staff member Joined Oct 20, 2014 Posts 18,163 Location United States Nov 17, 2017 #21 Re: Weird Chinese symbols in registry Let's make sure things are auditing as expected. Please open up regedit again, select HKEY_CURRENT_USER and then add a key in here named Sysnative. Then close the registry and do the following. Retrieve Security Event Log 1. Right-click on the Start button and select Event Viewer 2. Click the arrow next to Windows Logs and then click on the Security log. 3. Right-click on the Security Log and choose Save All Events As... 4. Select your desktop as the location to save and type Security for the File name and click Save. 5. If you are using a language on your machine other than English then on the next screen please ensure to select Display information for English and click OK. Otherwise you can simply click OK. 6. There will be a file on your desktop named Security.evtx. Right-click on this file and choose Send To..Compressed (zipped folder) which will create a file named Security.zip. 7. Please upload this file to SendSpace and provide the link in your next post.