mirror of https://github.com/tongzx/nt5src
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
2325 lines
159 KiB
2325 lines
159 KiB
<?xml version="1.0" encoding="UTF-16"?>
|
|
<!DOCTYPE DCARRIER SYSTEM "Mantis.DTD">
|
|
|
|
<DCARRIER
|
|
CarrierRevision="1"
|
|
DTDRevision="16"
|
|
>
|
|
<TASKS
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
> </TASKS>
|
|
|
|
<PLATFORMS
|
|
Context="1"
|
|
> </PLATFORMS>
|
|
|
|
<REPOSITORIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
> </REPOSITORIES>
|
|
|
|
<GROUPS
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
> </GROUPS>
|
|
|
|
<COMPONENTS
|
|
Context="0"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<COMPONENT
|
|
ComponentVSGUID="{05899140-B4CE-42C7-B80E-4F2AB3AF25D9}"
|
|
ComponentVIGUID="{37AE8550-B062-42F3-9580-3565190510CF}"
|
|
Revision="620"
|
|
RepositoryVSGUID="{8E0BE9ED-7649-47F3-810B-232D36C430B4}"
|
|
Visibility="1000"
|
|
MultiInstance="False"
|
|
Released="False"
|
|
Editable="True"
|
|
HTMLFinal="False"
|
|
IsMacro="False"
|
|
Opaque="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<HELPCONTEXT
|
|
src="D:\Beta3\base\eventlog\server\Event_Log_.htm"
|
|
><![CDATA[<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
|
|
<HTML DIR="LTR"><HEAD>
|
|
<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">
|
|
<STYLE TYPE="text/css">
|
|
<!--
|
|
BODY { font: normal 8pt Tahoma; background-color: #FFFFFF; }
|
|
P { font: normal 8pt Tahoma; }
|
|
.showhide { color: blue; text-decoration: underline; cursor: hand; }
|
|
.callout { font: normal 8pt Tahoma; background-color: #E0E0E0; padding: 10pt; }
|
|
.code { font: normal 8pt Courier New; }
|
|
UL { font: normal 8pt Tahoma; list-style: square outside; margin-left: 0.25in; }
|
|
OL { font: normal 8pt Tahoma; list-style: decimal outside; margin-left: 0.25in; }
|
|
H1 { font: bold 12pt Tahoma; margin-bottom: -12pt; }
|
|
H2 { font: bold 10pt Tahoma; margin-bottom: -12pt; }
|
|
H3 { font: bold 8pt Tahoma; margin-bottom: -12pt; }
|
|
H4 { font: italic 8pt Tahoma; margin-bottom: -12pt; }
|
|
TABLE { font: normal 8pt Tahoma; text-align: left; padding: 2px; }
|
|
CAPTION { font: bold 8pt Tahoma; text-align: left; padding: 2px; }
|
|
THEAD { font: bold 8pt Tahoma; text-align: left; padding: 2px; background-color: #F0F0F0 }
|
|
TH { font: bold 8pt Tahoma; text-align: left; padding: 2px; background-color: #F0F0F0 }
|
|
TBODY { font: normal 8pt Tahoma; text-align: left; padding: 2px; }
|
|
TD { font: normal 8pt Tahoma; text-align: left; padding: 2px; }
|
|
TR { font: normal 8pt Tahoma; text-align: left; padding: 2px; }
|
|
CODE { font-family: Courier New; }
|
|
TT { font-family: Courier New; }
|
|
KBD { font-family: Courier New; font-weight: bold; }
|
|
VAR { font-family: Courier New; font-style: italic; }
|
|
EM { font-style: italic; }
|
|
I { font-style: italic; }
|
|
STRONG { font-weight: bold; }
|
|
B { font-weight: bold; }
|
|
-->
|
|
</STYLE></HEAD>
|
|
<BODY TOPMARGIN="0">
|
|
|
|
The Event Log component is a dynamic-link library (.dll) that runs as part of Services.exe. Event Log stores and retrieves events that can be viewed through the event viewer. By default, there are three types of logs: Security, System, and Application. </P>
|
|
|
|
<H3>Component Configuration</H3>
|
|
|
|
<P>There are no configuration requirements for this component.</P>
|
|
|
|
<H3>Special Notes</H3>
|
|
|
|
<P>The event log service implements the following APIs:</P>
|
|
|
|
<P class="fineprint"></P>
|
|
|
|
<TABLE>
|
|
|
|
<TR VALIGN="top">
|
|
<TH width=50%>Function</TH>
|
|
<TH width=50%>Description</TH>
|
|
</TR>
|
|
|
|
<TR VALIGN="top">
|
|
<TD width=50%><B>BackupEventLog</B></TD>
|
|
<TD width=50%>Saves the specified event log to a backup file.</TD>
|
|
</TR>
|
|
|
|
<TR VALIGN="top">
|
|
<TD width=50%><B>ClearEventLog</B></TD>
|
|
<TD width=50%>Clears the specified event log, and optionally saves the current copy of the logfile to a backup file.</TD>
|
|
</TR>
|
|
|
|
<TR VALIGN="top">
|
|
<TD width=50%><B>CloseEventLog</B></TD>
|
|
<TD width=50%>Closes a read handle to the specified event log.</TD>
|
|
</TR>
|
|
|
|
<TR VALIGN="top">
|
|
<TD width=50%><B>DeregisterEventSource</B></TD>
|
|
<TD width=50%>Closes a write handle to the specified event log.</TD>
|
|
</TR>
|
|
|
|
<TR VALIGN="top">
|
|
<TD width=50%><B>GetEventLogInformation</B></TD>
|
|
<TD width=50%>Retrieves information about the specified event log.</TD>
|
|
</TR>
|
|
|
|
<TR VALIGN="top">
|
|
<TD width=50%><B>GetNumberOfEventLogRecords</B></TD>
|
|
<TD width=50%>Retrieves the number of records in the specified event log.</TD>
|
|
</TR>
|
|
|
|
<TR VALIGN="top">
|
|
<TD width=50%><B>GetOldestEventLogRecord</B></TD>
|
|
<TD width=50%>Retrieves the absolute record number of the oldest record in the specified event log.</TD>
|
|
</TR>
|
|
|
|
<TR VALIGN="top">
|
|
<TD width=50%><B>NotifyChangeEventLog</B></TD>
|
|
<TD width=50%>Enables an application to receive notification when an event is written to the specified event logfile.</TD>
|
|
</TR>
|
|
|
|
<TR VALIGN="top">
|
|
<TD width=50%><B>OpenBackupEventLog</B></TD>
|
|
<TD width=50%>Opens a handle to a backup event log.</TD>
|
|
</TR>
|
|
|
|
<TR VALIGN="top">
|
|
<TD width=50%><B>OpenEventLog</B></TD>
|
|
<TD width=50%>Opens a handle to an event log.</TD>
|
|
</TR>
|
|
|
|
<TR VALIGN="top">
|
|
<TD width=50%><B>ReadEventLog</B></TD>
|
|
<TD width=50%>Reads a whole number of entries from the specified event log.</TD>
|
|
</TR>
|
|
|
|
<TR VALIGN="top">
|
|
<TD width=50%><B>RegisterEventSource</B></TD>
|
|
<TD width=50%>Retrieves a registered handle to an event log.</TD>
|
|
</TR>
|
|
|
|
<TR VALIGN="top">
|
|
<TD width=50%><B>ReportEvent</B></TD>
|
|
<TD width=50%>Writes an entry at the end of the specified event log.</TD>
|
|
</TR>
|
|
</TABLE><BR>
|
|
|
|
<P class="fineprint"></P>
|
|
|
|
<H3>For More Information</H3>
|
|
|
|
<P>For more information on this component, see the chapter on Debugging and Error Handling in the Platform Software Development Kit (SDK) at this <A HREF="http://msdn.microsoft.com">Microsoft Web site</A>.</P>
|
|
|
|
</BODY>
|
|
</HTML>
|
|
]]></HELPCONTEXT>
|
|
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
> </PROPERTIES>
|
|
|
|
<RESOURCES
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<RESOURCE
|
|
Name="RawDep(273):"File","USER32.DLL""
|
|
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
|
|
BuildTypeMask="273"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="ComponentVSGUID"
|
|
Format="GUID"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>{00000000-0000-0000-0000-000000000000}</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RawType"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>File</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="Value"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>USER32.DLL</PROPERTY>
|
|
</PROPERTIES>
|
|
</RESOURCE>
|
|
|
|
<RESOURCE
|
|
Name="RawDep(273):"File","RPCRT4.DLL""
|
|
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
|
|
BuildTypeMask="273"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="ComponentVSGUID"
|
|
Format="GUID"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>{00000000-0000-0000-0000-000000000000}</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RawType"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>File</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="Value"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>RPCRT4.DLL</PROPERTY>
|
|
</PROPERTIES>
|
|
</RESOURCE>
|
|
|
|
<RESOURCE
|
|
Name="File(819):"%11%","eventlog.dll""
|
|
ResTypeVSGUID="{E66B49F6-4A35-4246-87E8-5C1A468315B5}"
|
|
BuildTypeMask="819"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="DstPath"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>%11%</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="DstName"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>eventlog.dll</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="NoExpand"
|
|
Format="Boolean"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>False</PROPERTY>
|
|
</PROPERTIES>
|
|
</RESOURCE>
|
|
|
|
<RESOURCE
|
|
Name="RawDep(819):"File","NTDLL.DLL""
|
|
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
|
|
BuildTypeMask="819"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="RawType"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>File</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="Value"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>NTDLL.DLL</PROPERTY>
|
|
</PROPERTIES>
|
|
</RESOURCE>
|
|
|
|
<RESOURCE
|
|
Name="RawDep(819):"File","KERNEL32.DLL""
|
|
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
|
|
BuildTypeMask="819"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="RawType"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>File</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="Value"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>KERNEL32.DLL</PROPERTY>
|
|
</PROPERTIES>
|
|
</RESOURCE>
|
|
|
|
<RESOURCE
|
|
Name="RawDep(819):"File","MSVCRT.DLL""
|
|
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
|
|
BuildTypeMask="819"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="RawType"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>File</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="Value"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>MSVCRT.DLL</PROPERTY>
|
|
</PROPERTIES>
|
|
</RESOURCE>
|
|
|
|
<RESOURCE
|
|
Name="RegKey(819):"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog","DisplayName""
|
|
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
|
|
BuildTypeMask="819"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="KeyPath"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="ValueName"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>DisplayName</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegValue"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>Event Log</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegType"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegOp"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegCond"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
</PROPERTIES>
|
|
</RESOURCE>
|
|
|
|
<RESOURCE
|
|
Name="RegKey(819):"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog","Description""
|
|
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
|
|
BuildTypeMask="819"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="KeyPath"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="ValueName"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>Description</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegValue"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>Logs event messages issued by programs and Windows. Event Log reports contain information that can be useful in diagnosing problems. Reports are viewed in Event Viewer.</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegType"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegOp"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegCond"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
</PROPERTIES>
|
|
</RESOURCE>
|
|
|
|
<RESOURCE
|
|
Name="RegKey(819):"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog""
|
|
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
|
|
BuildTypeMask="819"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="KeyPath"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegType"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegOp"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegCond"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
</PROPERTIES>
|
|
</RESOURCE>
|
|
|
|
<RESOURCE
|
|
Name="RegKey(819):"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog","Type""
|
|
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
|
|
BuildTypeMask="819"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="KeyPath"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="ValueName"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>Type</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegValue"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>32</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegType"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>4</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegOp"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegCond"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
</PROPERTIES>
|
|
</RESOURCE>
|
|
|
|
<RESOURCE
|
|
Name="RegKey(819):"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog","Start""
|
|
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
|
|
BuildTypeMask="819"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="KeyPath"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="ValueName"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>Start</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegValue"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>2</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegType"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>4</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegOp"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegCond"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
</PROPERTIES>
|
|
</RESOURCE>
|
|
|
|
<RESOURCE
|
|
Name="RegKey(819):"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog","PlugPlayServiceType""
|
|
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
|
|
BuildTypeMask="819"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="KeyPath"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="ValueName"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>PlugPlayServiceType</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegValue"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>3</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegType"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>4</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegOp"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegCond"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
</PROPERTIES>
|
|
</RESOURCE>
|
|
|
|
<RESOURCE
|
|
Name="RegKey(819):"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog","ObjectName""
|
|
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
|
|
BuildTypeMask="819"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="KeyPath"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="ValueName"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>ObjectName</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegValue"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>LocalSystem</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegType"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegOp"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegCond"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
</PROPERTIES>
|
|
</RESOURCE>
|
|
|
|
<RESOURCE
|
|
Name="RegKey(819):"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog","ImagePath""
|
|
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
|
|
BuildTypeMask="819"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="KeyPath"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="ValueName"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>ImagePath</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegValue"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>%SystemRoot%\system32\services.exe</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegType"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>2</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegOp"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegCond"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
</PROPERTIES>
|
|
</RESOURCE>
|
|
|
|
<RESOURCE
|
|
Name="RegKey(819):"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog","Group""
|
|
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
|
|
BuildTypeMask="819"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="KeyPath"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="ValueName"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>Group</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegValue"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>Event log</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegType"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegOp"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegCond"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
</PROPERTIES>
|
|
</RESOURCE>
|
|
|
|
<RESOURCE
|
|
Name="RegKey(819):"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog","ErrorControl""
|
|
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
|
|
BuildTypeMask="819"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="KeyPath"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="ValueName"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>ErrorControl</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegValue"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegType"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>4</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegOp"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegCond"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
</PROPERTIES>
|
|
</RESOURCE>
|
|
|
|
<RESOURCE
|
|
Name="RawDep(819):"File","netevent.dll""
|
|
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
|
|
BuildTypeMask="819"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="RawType"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>File</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="Value"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>netevent.dll</PROPERTY>
|
|
</PROPERTIES>
|
|
</RESOURCE>
|
|
|
|
<RESOURCE
|
|
Name="RegKey(819):"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application","DisplayNameFile""
|
|
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
|
|
BuildTypeMask="819"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="KeyPath"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="ValueName"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>DisplayNameFile</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegValue"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>%SystemRoot%\system32\els.dll</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegType"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>2</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegOp"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegCond"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
</PROPERTIES>
|
|
</RESOURCE>
|
|
|
|
<RESOURCE
|
|
Name="RegKey(819):"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application","DisplayNameID""
|
|
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
|
|
BuildTypeMask="819"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="KeyPath"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="ValueName"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>DisplayNameID</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegValue"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>256</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegType"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>4</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegOp"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegCond"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
</PROPERTIES>
|
|
</RESOURCE>
|
|
|
|
<RESOURCE
|
|
Name="RegKey(819):"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application","File""
|
|
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
|
|
BuildTypeMask="819"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="KeyPath"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="ValueName"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>File</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegValue"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>%SystemRoot%\system32\config\AppEvent.Evt</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegType"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>2</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegOp"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegCond"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
</PROPERTIES>
|
|
</RESOURCE>
|
|
|
|
<RESOURCE
|
|
Name="RegKey(819):"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application","MaxSize""
|
|
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
|
|
BuildTypeMask="819"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="KeyPath"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="ValueName"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>MaxSize</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegValue"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>5046272</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegType"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>4</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegOp"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegCond"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
</PROPERTIES>
|
|
</RESOURCE>
|
|
|
|
<RESOURCE
|
|
Name="RegKey(819):"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application","PrimaryModule""
|
|
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
|
|
BuildTypeMask="819"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="KeyPath"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="ValueName"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>PrimaryModule</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegValue"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>Application</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegType"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegOp"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegCond"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
</PROPERTIES>
|
|
</RESOURCE>
|
|
|
|
<RESOURCE
|
|
Name="RegKey(819):"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application","Retention""
|
|
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
|
|
BuildTypeMask="819"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="KeyPath"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="ValueName"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>Retention</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegValue"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>0</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegType"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>4</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegOp"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegCond"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
</PROPERTIES>
|
|
</RESOURCE>
|
|
|
|
<RESOURCE
|
|
Name="RegKey(819):"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security","DisplayNameFile""
|
|
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
|
|
BuildTypeMask="819"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="KeyPath"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="ValueName"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>DisplayNameFile</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegValue"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>%SystemRoot%\system32\els.dll</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegType"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>2</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegOp"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegCond"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
</PROPERTIES>
|
|
</RESOURCE>
|
|
|
|
<RESOURCE
|
|
Name="RegKey(819):"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security","DisplayNameID""
|
|
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
|
|
BuildTypeMask="819"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="KeyPath"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="ValueName"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>DisplayNameID</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegValue"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>257</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegType"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>4</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegOp"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegCond"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
</PROPERTIES>
|
|
</RESOURCE>
|
|
|
|
<RESOURCE
|
|
Name="RegKey(819):"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security","File""
|
|
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
|
|
BuildTypeMask="819"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="KeyPath"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="ValueName"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>File</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegValue"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>%SystemRoot%\System32\config\SecEvent.Evt</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegType"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>2</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegOp"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegCond"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
</PROPERTIES>
|
|
</RESOURCE>
|
|
|
|
<RESOURCE
|
|
Name="RegKey(819):"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security","MaxSize""
|
|
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
|
|
BuildTypeMask="819"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="KeyPath"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="ValueName"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>MaxSize</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegValue"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>5046272</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegType"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>4</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegOp"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegCond"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
</PROPERTIES>
|
|
</RESOURCE>
|
|
|
|
<RESOURCE
|
|
Name="RegKey(819):"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security","PrimaryModule""
|
|
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
|
|
BuildTypeMask="819"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="KeyPath"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="ValueName"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>PrimaryModule</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegValue"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>Security</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegType"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegOp"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegCond"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
</PROPERTIES>
|
|
</RESOURCE>
|
|
|
|
<RESOURCE
|
|
Name="RegKey(819):"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security","Retention""
|
|
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
|
|
BuildTypeMask="819"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="KeyPath"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="ValueName"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>Retention</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegValue"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>0</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegType"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>4</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegOp"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegCond"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
</PROPERTIES>
|
|
</RESOURCE>
|
|
|
|
<RESOURCE
|
|
Name="RegKey(819):"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System","DisplayNameFile""
|
|
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
|
|
BuildTypeMask="819"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="KeyPath"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="ValueName"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>DisplayNameFile</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegValue"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>%SystemRoot%\system32\els.dll</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegType"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>2</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegOp"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegCond"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
</PROPERTIES>
|
|
</RESOURCE>
|
|
|
|
<RESOURCE
|
|
Name="RegKey(819):"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System","DisplayNameID""
|
|
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
|
|
BuildTypeMask="819"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="KeyPath"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="ValueName"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>DisplayNameID</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegValue"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>258</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegType"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>4</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegOp"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegCond"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
</PROPERTIES>
|
|
</RESOURCE>
|
|
|
|
<RESOURCE
|
|
Name="RegKey(819):"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System","File""
|
|
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
|
|
BuildTypeMask="819"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="KeyPath"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="ValueName"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>File</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegValue"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>%SystemRoot%\system32\config\SysEvent.Evt</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegType"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>2</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegOp"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegCond"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
</PROPERTIES>
|
|
</RESOURCE>
|
|
|
|
<RESOURCE
|
|
Name="RegKey(819):"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System","MaxSize""
|
|
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
|
|
BuildTypeMask="819"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="KeyPath"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="ValueName"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>MaxSize</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegValue"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>5046272</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegType"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>4</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegOp"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegCond"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
</PROPERTIES>
|
|
</RESOURCE>
|
|
|
|
<RESOURCE
|
|
Name="RegKey(819):"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System","PrimaryModule""
|
|
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
|
|
BuildTypeMask="819"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="KeyPath"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="ValueName"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>PrimaryModule</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegValue"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>System</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegType"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegOp"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegCond"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
</PROPERTIES>
|
|
</RESOURCE>
|
|
|
|
<RESOURCE
|
|
Name="RegKey(819):"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System","Retention""
|
|
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
|
|
BuildTypeMask="819"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="KeyPath"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="ValueName"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>Retention</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegValue"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>0</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegType"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>4</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegOp"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="RegCond"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>1</PROPERTY>
|
|
</PROPERTIES>
|
|
</RESOURCE>
|
|
|
|
<RESOURCE
|
|
Name="RawDep(819):"File","els.dll""
|
|
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
|
|
BuildTypeMask="819"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="RawType"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>File</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="Value"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>els.dll</PROPERTY>
|
|
</PROPERTIES>
|
|
</RESOURCE>
|
|
|
|
<RESOURCE
|
|
Name="RawDep(819):"File","advapi32.dll""
|
|
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
|
|
BuildTypeMask="819"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="RawType"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>File</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="Value"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>advapi32.dll</PROPERTY>
|
|
</PROPERTIES>
|
|
</RESOURCE>
|
|
|
|
<RESOURCE
|
|
Name="RawDep(819):"File","WS2_32.dll""
|
|
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
|
|
BuildTypeMask="819"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="RawType"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>File</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="Value"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>WS2_32.dll</PROPERTY>
|
|
</PROPERTIES>
|
|
</RESOURCE>
|
|
|
|
<RESOURCE
|
|
Name="RawDep(819):"File","PSAPI.DLL""
|
|
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
|
|
BuildTypeMask="819"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="RawType"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>File</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="Value"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>PSAPI.DLL</PROPERTY>
|
|
</PROPERTIES>
|
|
</RESOURCE>
|
|
|
|
<RESOURCE
|
|
Name="RawDep(819):"File","NETAPI32.dll""
|
|
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
|
|
BuildTypeMask="819"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="RawType"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>File</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="Value"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>NETAPI32.dll</PROPERTY>
|
|
</PROPERTIES>
|
|
</RESOURCE>
|
|
|
|
<RESOURCE
|
|
Name="RawDep(819):"File","netmsg.dll""
|
|
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
|
|
BuildTypeMask="819"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="RawType"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>File</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="Value"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>netmsg.dll</PROPERTY>
|
|
</PROPERTIES>
|
|
</RESOURCE>
|
|
|
|
<RESOURCE
|
|
Name="File(819):"%18%","evconcepts.chm""
|
|
ResTypeVSGUID="{E66B49F6-4A35-4246-87E8-5C1A468315B5}"
|
|
BuildTypeMask="819"
|
|
BuildOrder="1000"
|
|
Localize="False"
|
|
Disabled="False"
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
>
|
|
<PROPERTIES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>
|
|
<PROPERTY
|
|
Name="ComponentVSGUID"
|
|
Format="GUID"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>{00000000-0000-0000-0000-000000000000}</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="DstName"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>evconcepts.chm</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="DstPath"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>%18%</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="NoExpand"
|
|
Format="Boolean"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>False</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="SrcFileCRC"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>0</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="SrcFileSize"
|
|
Format="Integer"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>64982</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="SrcName"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
>evcon.chm</PROPERTY>
|
|
|
|
<PROPERTY
|
|
Name="SrcPath"
|
|
Format="String"
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
></PROPERTY>
|
|
</PROPERTIES>
|
|
|
|
<DISPLAYNAME>evconcepts.chm</DISPLAYNAME>
|
|
|
|
<DESCRIPTION></DESCRIPTION>
|
|
</RESOURCE>
|
|
</RESOURCES>
|
|
|
|
<GROUPMEMBERS
|
|
>
|
|
<GROUPMEMBER
|
|
GroupVSGUID="{E01B4103-3883-4FE8-992F-10566E7B796C}"
|
|
></GROUPMEMBER>
|
|
|
|
<GROUPMEMBER
|
|
GroupVSGUID="{833CB665-7185-4457-B756-D698ECFBD288}"
|
|
></GROUPMEMBER>
|
|
</GROUPMEMBERS>
|
|
|
|
<DEPENDENCIES
|
|
Context="1"
|
|
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
|
|
> </DEPENDENCIES>
|
|
|
|
<DISPLAYNAME>Event Log</DISPLAYNAME>
|
|
|
|
<VERSION>1.0</VERSION>
|
|
|
|
<DESCRIPTION>Logs event messages issued by programs and Windows.</DESCRIPTION>
|
|
|
|
<COPYRIGHT>2000 Microsoft Corp.</COPYRIGHT>
|
|
|
|
<VENDOR>Microsoft Corp.</VENDOR>
|
|
|
|
<OWNERS>drbeck</OWNERS>
|
|
|
|
<AUTHORS>drbeck; shbrown</AUTHORS>
|
|
|
|
<DATECREATED>12/18/2000</DATECREATED>
|
|
|
|
<DATEREVISED>10/16/2001 12:13:47 AM</DATEREVISED>
|
|
</COMPONENT>
|
|
</COMPONENTS>
|
|
|
|
<RESTYPES
|
|
Context="1"
|
|
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
|
|
> </RESTYPES>
|
|
</DCARRIER>
|