日志名称: Application
来源: Microsoft-Windows-LoadPerf
日期: 2014-09-11 23:06:00
事件 ID: 3011
任务类别: 无
级别: 错误
关键字:
用户: SYSTEM
计算机: VYVAJCBVCCBCL7P
描述:
为服务 WmiApRpl (WmiApRpl) 卸载性能计数器字符串失败。数据段中的第一个 DWORD 包含错误代码。
事件 Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-LoadPerf" Guid="{122EE297-BB47-41AE-B265-1CA8D1886D40}" />
<EventID>3011</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2014-09-11T15:06:00.688480900Z" />
<EventRecordID>946</EventRecordID>
<Correlation />
<Execution ProcessID="2140" ThreadID="2136" />
<Channel>Application</Channel>
<Computer>VYVAJCBVCCBCL7P</Computer>
<Security UserID="S-1-5-18" />
</System>
<UserData>
<EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
<param1>WmiApRpl</param1>
<param2>WmiApRpl</param2>
<binaryDataSize>8</binaryDataSize>
<binaryData>F20300004D070000</binaryData>
</EventXML>
</UserData>
</Event>