Replace winevt folder copy with wevtutil

[tmolenh]

1. Avoids possible race condition between copy and log write.
2. Includes format information for correct rendering of events.