> Yes, probably this bug only affects event viewer itself. I don't > understand how and why Microsoft achieved this effect in event viewer, > which is, by the way, security tool, and if it's hard for different > vendor to make same mistake. For what it's worth, the updated viewer in Windows Vista can show string inserts separately, in a list. IIRC its XML export function exports them separately, too