 :   System
:      Service Control Manager
:          16.03.2014 2:14:25
 :   7036
 :
:       
 :
:  /
:     -
:
 "   "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T18:14:25.946620100Z" />
    <EventRecordID>35492</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2664" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   </Data>
    <Data Name="param2"></Data>
    <Binary>410065004C006F006F006B00750070005300760063002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 2:11:08
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T18:11:08.549329600Z" />
    <EventRecordID>35491</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2832" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>4D004D004300530053002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 2:10:11
 :   7040
 :
:       
 :
:  
:     -
:
   "    (BITS)"    ""  "".
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7040</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T18:10:11.151046600Z" />
    <EventRecordID>35490</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1664" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="param1">    (BITS)</Data>
    <Data Name="param2"></Data>
    <Data Name="param3"></Data>
    <Data Name="param4">BITS</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 2:08:25
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T18:08:25.907027000Z" />
    <EventRecordID>35489</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1392" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>4D004D004300530053002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 2:04:23
 :   7040
 :
:       
 :
:  
:     -
:
   "    (BITS)"    ""  "".
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7040</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T18:04:23.310151200Z" />
    <EventRecordID>35488</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2140" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="param1">    (BITS)</Data>
    <Data Name="param2"></Data>
    <Data Name="param3"></Data>
    <Data Name="param4">BITS</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 2:03:24
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T18:03:24.784803800Z" />
    <EventRecordID>35487</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="992" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>4D004D004300530053002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 2:03:09
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T18:03:09.203912600Z" />
    <EventRecordID>35486</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="992" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 2:03:03
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T18:03:03.175567800Z" />
    <EventRecordID>35485</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="992" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 2:01:29
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T18:01:29.346201100Z" />
    <EventRecordID>35484</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="884" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 2:01:23
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T18:01:23.217850500Z" />
    <EventRecordID>35483</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2908" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 2:01:15
 :   7036
 :
:       
 :
:  /
:     -
:
 "   "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T18:01:15.591414300Z" />
    <EventRecordID>35482</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="884" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   </Data>
    <Data Name="param2"></Data>
    <Binary>410065004C006F006F006B00750070005300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:56:30
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:56:30.164088800Z" />
    <EventRecordID>35481</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1220" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:56:23
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:56:23.188689900Z" />
    <EventRecordID>35480</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1220" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:54:23
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:54:23.862864800Z" />
    <EventRecordID>35479</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2776" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:54:17
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:54:17.200483700Z" />
    <EventRecordID>35478</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2776" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:49:23
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:49:23.426680800Z" />
    <EventRecordID>35477</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1852" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:49:17
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:49:17.151321900Z" />
    <EventRecordID>35476</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2304" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:47:15
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:47:15.676373900Z" />
    <EventRecordID>35475</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1852" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:47:09
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:47:09.182002500Z" />
    <EventRecordID>35474</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2672" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:42:16
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:42:16.010234000Z" />
    <EventRecordID>35473</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2544" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:42:09
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:42:09.155842000Z" />
    <EventRecordID>35472</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1984" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:40:09
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:40:09.354989700Z" />
    <EventRecordID>35471</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2912" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:40:03
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:40:03.187637000Z" />
    <EventRecordID>35470</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2544" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:37:09
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:37:09.218686500Z" />
    <EventRecordID>35469</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2884" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>570064006900530079007300740065006D0048006F00730074002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:35:09
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:35:09.237824000Z" />
    <EventRecordID>35468</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2924" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:35:03
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:35:03.150475900Z" />
    <EventRecordID>35467</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2112" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:33:01
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:33:01.419513200Z" />
    <EventRecordID>35466</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1144" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:32:55
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:32:55.192157100Z" />
    <EventRecordID>35465</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1144" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:28:01
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:28:01.680369100Z" />
    <EventRecordID>35464</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2360" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:27:55
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:27:55.190998000Z" />
    <EventRecordID>35463</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="936" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:25:53
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:25:53.307026600Z" />
    <EventRecordID>35462</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2360" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:25:47
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:25:47.198677200Z" />
    <EventRecordID>35461</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2704" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:20:53
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:20:53.923902900Z" />
    <EventRecordID>35460</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="3068" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:20:47
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:20:47.258521600Z" />
    <EventRecordID>35459</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="3068" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:18:48
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:18:48.064704100Z" />
    <EventRecordID>35458</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="3056" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:18:41
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:18:41.266315300Z" />
    <EventRecordID>35457</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2952" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:15:26
 :   7036
 :
:       
 :
:  /
:     -
:
 "   "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:15:26.185157300Z" />
    <EventRecordID>35456</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1176" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   </Data>
    <Data Name="param2"></Data>
    <Binary>410065004C006F006F006B00750070005300760063002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:13:48
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:13:48.303558800Z" />
    <EventRecordID>35455</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1176" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:13:42
 :   7036
 :
:       
 :
:  /
:     -
:
 "   - WinHTTP"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:13:42.047200900Z" />
    <EventRecordID>35454</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1176" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   - WinHTTP</Data>
    <Data Name="param2"></Data>
    <Binary>570069006E0048007400740070004100750074006F00500072006F00780079005300760063002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:13:41
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:13:41.188151800Z" />
    <EventRecordID>35453</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2908" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:11:39
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:11:39.309180700Z" />
    <EventRecordID>35452</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1744" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:11:33
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:11:33.176830000Z" />
    <EventRecordID>35451</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1176" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:10:46
 :   7036
 :
:       
 :
:  /
:     -
:
 "  Windows"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:10:46.255146200Z" />
    <EventRecordID>35450</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1744" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  Windows</Data>
    <Data Name="param2"></Data>
    <Binary>540072007500730074006500640049006E007300740061006C006C00650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:10:44
 :   7040
 :
:       
 :
:  
:     -
:
   "  Windows"    ""  "".
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7040</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:10:44.438042300Z" />
    <EventRecordID>35449</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1744" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="param1">  Windows</Data>
    <Data Name="param2"></Data>
    <Data Name="param3"></Data>
    <Data Name="param4">TrustedInstaller</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:10:35
 :   7040
 :
:       
 :
:  
:     -
:
   "  Windows"    ""  "".
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7040</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:10:35.084507300Z" />
    <EventRecordID>35448</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1744" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="param1">  Windows</Data>
    <Data Name="param2"></Data>
    <Data Name="param3"></Data>
    <Data Name="param4">TrustedInstaller</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:10:14
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:10:14.556333100Z" />
    <EventRecordID>35447</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="268" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>4D004D004300530053002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:06:39
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:06:39.310021800Z" />
    <EventRecordID>35446</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1168" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:06:33
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:06:33.148669300Z" />
    <EventRecordID>35445</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1168" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:05:37
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:05:37.181607900Z" />
    <EventRecordID>35444</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1884" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:05:31
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:05:31.151975200Z" />
    <EventRecordID>35443</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1884" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      519D0F3BDCEED46A
:          16.03.2014 1:05:18
 :   1
 :
:       
 :
:  /
:     -
:
       1   519D0F3BDCEED46A.            .       .

     , ,       .

     : 


Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="519D0F3BDCEED46A" />
    <EventID Qualifiers="16426">1</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:05:18.185643100Z" />
    <EventRecordID>35442</EventRecordID>
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Binary>0E000000010000000000000001002A40000000000000000000000000000000000000000000000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:05:14
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:05:14.017607300Z" />
    <EventRecordID>35441</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1884" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>4D004D004300530053002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:05:12
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:05:12.134904800Z" />
    <EventRecordID>35440</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1884" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>41007000700069006E0066006F002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:04:31
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:04:31.173962800Z" />
    <EventRecordID>35439</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1168" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:04:25
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:04:25.150618300Z" />
    <EventRecordID>35438</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="704" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:04:14
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:04:14.999037700Z" />
    <EventRecordID>35437</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1168" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>7300700070007300760063002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:02:16
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:02:16.249245600Z" />
    <EventRecordID>35436</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1264" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>4D004D004300530053002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:01:05
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:01:05.172180200Z" />
    <EventRecordID>35435</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1264" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:00:59
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:00:59.147835600Z" />
    <EventRecordID>35434</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="544" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:00:19
 :   7036
 :
:       
 :
:  /
:     -
:
 "  Windows"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:00:19.621574900Z" />
    <EventRecordID>35433</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1264" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  Windows</Data>
    <Data Name="param2"></Data>
    <Binary>540072007500730074006500640049006E007300740061006C006C00650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 1:00:02
 :   7036
 :
:       
 :
:  /
:     -
:
 "  Windows"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T17:00:02.740609300Z" />
    <EventRecordID>35432</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="544" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  Windows</Data>
    <Data Name="param2"></Data>
    <Binary>570033003200540069006D0065002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:59:41
 :   7036
 :
:       
 :
:  /
:     -
:
 "   Windows"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:59:41.260380700Z" />
    <EventRecordID>35431</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1264" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   Windows</Data>
    <Data Name="param2"></Data>
    <Binary>5700650072005300760063002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:59:31
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:59:31.178804100Z" />
    <EventRecordID>35430</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1264" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:59:25
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:59:25.150459300Z" />
    <EventRecordID>35429</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1264" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:59:17
 :   7036
 :
:       
 :
:  /
:     -
:
 "  Windows"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:59:17.832040700Z" />
    <EventRecordID>35428</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="544" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  Windows</Data>
    <Data Name="param2"></Data>
    <Binary>770075006100750073006500720076002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:59:15
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:59:15.006879100Z" />
    <EventRecordID>35427</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="544" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>7700730063007300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:59:14
 :   7036
 :
:       
 :
:  /
:     -
:
 " Windows"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:59:14.747864300Z" />
    <EventRecordID>35426</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="544" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> Windows</Data>
    <Data Name="param2"></Data>
    <Binary>570069006E0044006500660065006E0064002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:59:14
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:59:14.064825200Z" />
    <EventRecordID>35425</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="544" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>7300700070007300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:59:13
 :   7036
 :
:       
 :
:  /
:     -
:
 " Google Update (gupdate)"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:59:13.601798800Z" />
    <EventRecordID>35424</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="544" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> Google Update (gupdate)</Data>
    <Data Name="param2"></Data>
    <Binary>67007500700064006100740065002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:59:13
 :   7036
 :
:       
 :
:  /
:     -
:
 " Google Update (gupdate)"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:59:13.505793300Z" />
    <EventRecordID>35423</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="544" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> Google Update (gupdate)</Data>
    <Data Name="param2"></Data>
    <Binary>67007500700064006100740065002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:59:12
 :   7036
 :
:       
 :
:  /
:     -
:
 "Microsoft .NET Framework NGEN v4.0.30319_X64"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:59:12.945761200Z" />
    <EventRecordID>35422</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="544" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">Microsoft .NET Framework NGEN v4.0.30319_X64</Data>
    <Data Name="param2"></Data>
    <Binary>63006C0072005F006F007000740069006D0069007A006100740069006F006E005F00760034002E0030002E00330030003300310039005F00360034002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:59:12
 :   7036
 :
:       
 :
:  /
:     -
:
 "Microsoft .NET Framework NGEN v4.0.30319_X64"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:59:12.945761200Z" />
    <EventRecordID>35421</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="544" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">Microsoft .NET Framework NGEN v4.0.30319_X64</Data>
    <Data Name="param2"></Data>
    <Binary>63006C0072005F006F007000740069006D0069007A006100740069006F006E005F00760034002E0030002E00330030003300310039005F00360034002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:59:12
 :   7036
 :
:       
 :
:  /
:     -
:
 "Microsoft .NET Framework NGEN v4.0.30319_X86"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:59:12.680746100Z" />
    <EventRecordID>35420</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="544" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">Microsoft .NET Framework NGEN v4.0.30319_X86</Data>
    <Data Name="param2"></Data>
    <Binary>63006C0072005F006F007000740069006D0069007A006100740069006F006E005F00760034002E0030002E00330030003300310039005F00330032002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:59:12
 :   7036
 :
:       
 :
:  /
:     -
:
 "Microsoft .NET Framework NGEN v4.0.30319_X86"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:59:12.680746100Z" />
    <EventRecordID>35419</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="544" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">Microsoft .NET Framework NGEN v4.0.30319_X86</Data>
    <Data Name="param2"></Data>
    <Binary>63006C0072005F006F007000740069006D0069007A006100740069006F006E005F00760034002E0030002E00330030003300310039005F00330032002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:59:12
 :   7036
 :
:       
 :
:  /
:     -
:
 "   "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:59:12.549738600Z" />
    <EventRecordID>35418</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="544" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   </Data>
    <Data Name="param2"></Data>
    <Binary>57005000440042007500730045006E0075006D002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:59:11
 :   7036
 :
:       
 :
:  /
:     -
:
 "    (BITS)"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:59:11.807696100Z" />
    <EventRecordID>35417</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="544" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">    (BITS)</Data>
    <Data Name="param2"></Data>
    <Binary>42004900540053002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-DNS-Client
:          16.03.2014 0:58:27
 :   1014
 :
:       
 :
:  NETWORK SERVICE
:     -
:
    fbcdn-profile-a.akamaihd.net        DNS.
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-DNS-Client" Guid="{1C95126E-7EEA-49A9-A3FE-A378B03DDB4D}" />
    <EventID>1014</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x4000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:58:27.206955500Z" />
    <EventRecordID>35416</EventRecordID>
    <Correlation />
    <Execution ProcessID="960" ThreadID="1768" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-20" />
  </System>
  <EventData>
    <Data Name="QueryName">fbcdn-profile-a.akamaihd.net</Data>
    <Data Name="AddressLength">16</Data>
    <Data Name="Address">02000035C0A800010000000000000000</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:53
 :   7036
 :
:       
 :
:  /
:     -
:
 "   "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:53.146257500Z" />
    <EventRecordID>35415</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1672" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   </Data>
    <Data Name="param2"></Data>
    <Binary>410065004C006F006F006B00750070005300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:45
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:45.212803700Z" />
    <EventRecordID>35414</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="544" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:41
 :   7036
 :
:       
 :
:  /
:     -
:
 "   Windows"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:41.258181000Z" />
    <EventRecordID>35413</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="544" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   Windows</Data>
    <Data Name="param2"></Data>
    <Binary>5700650072005300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:39
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:39.164091500Z" />
    <EventRecordID>35412</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1672" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:27
 :   7036
 :
:       
 :
:  /
:     -
:
 "  PNP-"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:27.323670700Z" />
    <EventRecordID>35411</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1672" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  PNP-</Data>
    <Data Name="param2"></Data>
    <Binary>750070006E00700068006F00730074002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-WMPNSS-Service
:          16.03.2014 0:57:27
 :   14206
 :
:       
 :
:  /
:     -
:
  "-: :"  ,         .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-WMPNSS-Service" Guid="{6A2DC7C1-930A-4FB5-BB44-80B30AEBED6C}" EventSourceName="WMPNetworkSvc" />
    <EventID Qualifiers="16397">14206</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:27.000000000Z" />
    <EventRecordID>35410</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="FriendlyName">-: :</Data>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-Application-Experience
:          16.03.2014 0:57:26
 :   206
 :
:       
 :
:  
:     -
:
         .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Application-Experience" Guid="{EEF54E71-0661-422D-9A98-82FD4940B820}" />
    <EventID>206</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:26.559269400Z" />
    <EventRecordID>35409</EventRecordID>
    <Correlation />
    <Execution ProcessID="820" ThreadID="308" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:26
 :   7036
 :
:       
 :
:  /
:     -
:
 " SSDP"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:26.450069200Z" />
    <EventRecordID>35408</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1672" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> SSDP</Data>
    <Data Name="param2"></Data>
    <Binary>53005300440050005300520056002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:26
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:26.106868600Z" />
    <EventRecordID>35407</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1672" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>7000320070007300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:26
 :   7036
 :
:       
 :
:  /
:     -
:
 " PNRP"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:26.091268500Z" />
    <EventRecordID>35406</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="544" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> PNRP</Data>
    <Data Name="param2"></Data>
    <Binary>50004E00520050007300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:25
 :   7036
 :
:       
 :
:  /
:     -
:
 "   "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:25.670067800Z" />
    <EventRecordID>35405</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="548" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   </Data>
    <Data Name="param2"></Data>
    <Binary>70003200700069006D007300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:25
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:25.623267700Z" />
    <EventRecordID>35404</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="548" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>48006F006D006500470072006F00750070004C0069007300740065006E00650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:25
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:25.420467400Z" />
    <EventRecordID>35403</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="548" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>48006F006D006500470072006F0075007000500072006F00760069006400650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:25
 :   7036
 :
:       
 :
:  /
:     -
:
 "   "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:25.420467400Z" />
    <EventRecordID>35402</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1672" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   </Data>
    <Data Name="param2"></Data>
    <Binary>460044005200650073005000750062002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:25
 :   7036
 :
:       
 :
:  /
:     -
:
 "   "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:25.202067000Z" />
    <EventRecordID>35401</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="544" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   </Data>
    <Data Name="param2"></Data>
    <Binary>66006400500048006F00730074002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:25
 :   7036
 :
:       
 :
:  /
:     -
:
 "     Windows Media"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:25.061666700Z" />
    <EventRecordID>35400</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="544" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">     Windows Media</Data>
    <Data Name="param2"></Data>
    <Binary>57004D0050004E006500740077006F0072006B005300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-WMPNSS-Service
:          16.03.2014 0:57:25
 :   14204
 :
:       
 :
:  /
:     -
:
 "WMPNetworkSvc" .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-WMPNSS-Service" Guid="{6A2DC7C1-930A-4FB5-BB44-80B30AEBED6C}" EventSourceName="WMPNetworkSvc" />
    <EventID Qualifiers="16397">14204</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:25.000000000Z" />
    <EventRecordID>35399</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="ServiceName">WMPNetworkSvc</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:22
 :   7036
 :
:       
 :
:  /
:     -
:
 "Windows Search"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:22.503262200Z" />
    <EventRecordID>35398</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="548" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">Windows Search</Data>
    <Data Name="param2"></Data>
    <Binary>57005300650061007200630068002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:21
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:21.036859700Z" />
    <EventRecordID>35397</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="544" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>4E00650074006D0061006E002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:20
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:20.662459000Z" />
    <EventRecordID>35396</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="548" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:13
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:13.156045600Z" />
    <EventRecordID>35395</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="544" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:12
 :   7036
 :
:       
 :
:  /
:     -
:
 "   "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:12.547644500Z" />
    <EventRecordID>35394</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="552" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   </Data>
    <Data Name="param2"></Data>
    <Binary>57005000440042007500730045006E0075006D002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-Winlogon
:          16.03.2014 0:57:12
 :   7001
 :(1101)
:       
 :
:  
:     -
:
        
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Winlogon" Guid="{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}" />
    <EventID>7001</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>1101</Task>
    <Opcode>0</Opcode>
    <Keywords>0x2000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:12.032843600Z" />
    <EventRecordID>35393</EventRecordID>
    <Correlation ActivityID="{67144949-5132-4859-8036-A737B43825D8}" />
    <Execution ProcessID="588" ThreadID="612" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="TSId">1</Data>
    <Data Name="UserSid">S-1-5-21-3368229806-3106785895-14530972-1003</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:12
 :   7036
 :
:       
 :
:  /
:     -
:
 "   - WinHTTP"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:12.032843600Z" />
    <EventRecordID>35392</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="548" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   - WinHTTP</Data>
    <Data Name="param2"></Data>
    <Binary>570069006E0048007400740070004100750074006F00500072006F00780079005300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:11
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:11.736443100Z" />
    <EventRecordID>35391</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="544" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>6E0065007400700072006F0066006D002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:11
 :   7036
 :
:       
 :
:  /
:     -
:
 "  HID-"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:11.642843000Z" />
    <EventRecordID>35390</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="544" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  HID-</Data>
    <Data Name="param2"></Data>
    <Binary>68006900640073006500720076002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:11
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:11.642843000Z" />
    <EventRecordID>35389</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="544" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>570064006900530079007300740065006D0048006F00730074002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:11
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:11.580442800Z" />
    <EventRecordID>35388</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="552" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>570064006900530065007200760069006300650048006F00730074002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:11
 :   7036
 :
:       
 :
:  /
:     -
:
 ""    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:11.533642800Z" />
    <EventRecordID>35387</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="544" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"></Data>
    <Data Name="param2"></Data>
    <Binary>4C0061006E006D0061006E005300650072007600650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:09
 :   7036
 :
:       
 :
:  /
:     -
:
 "  IP"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:09.552439300Z" />
    <EventRecordID>35386</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="544" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  IP</Data>
    <Data Name="param2"></Data>
    <Binary>6900700068006C0070007300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:09
 :   7036
 :
:       
 :
:  /
:     -
:
 "  Windows"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:09.521239200Z" />
    <EventRecordID>35385</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="544" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  Windows</Data>
    <Data Name="param2"></Data>
    <Binary>570069006E006D0067006D0074002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:09
 :   7036
 :
:       
 :
:  /
:     -
:
 "   "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:09.131238500Z" />
    <EventRecordID>35384</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="544" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   </Data>
    <Data Name="param2"></Data>
    <Binary>540072006B0057006B0073002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:09
 :   7036
 :
:       
 :
:  /
:     -
:
 "Superfetch"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:09.131238500Z" />
    <EventRecordID>35383</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="544" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">Superfetch</Data>
    <Data Name="param2"></Data>
    <Binary>5300790073004D00610069006E002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:08
 :   7036
 :
:       
 :
:  /
:     -
:
 "    "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:08.848438100Z" />
    <EventRecordID>35382</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="544" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">    </Data>
    <Data Name="param2"></Data>
    <Binary>4E006C0061005300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:08
 :   7036
 :
:       
 :
:  /
:     -
:
 "   Windows (WIA)"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:08.668437800Z" />
    <EventRecordID>35381</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="544" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   Windows (WIA)</Data>
    <Data Name="param2"></Data>
    <Binary>7300740069007300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:08
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:08.478437600Z" />
    <EventRecordID>35380</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1084" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>430072007900700074005300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:08
 :   7036
 :
:       
 :
:  /
:     -
:
 "    "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:08.428437500Z" />
    <EventRecordID>35379</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1084" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">    </Data>
    <Data Name="param2"></Data>
    <Binary>5000630061005300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-Application-Experience
:          16.03.2014 0:57:08
 :   201
 :
:       
 :
:  
:     -
:
      .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Application-Experience" Guid="{EEF54E71-0661-422D-9A98-82FD4940B820}" />
    <EventID>201</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:08.428437500Z" />
    <EventRecordID>35378</EventRecordID>
    <Correlation />
    <Execution ProcessID="820" ThreadID="1440" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:08
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:08.358437400Z" />
    <EventRecordID>35377</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="548" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>4400500053002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:08
 :   7036
 :
:       
 :
:  /
:     -
:
 "Adobe Acrobat Update Service"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:08.348437400Z" />
    <EventRecordID>35376</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="548" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">Adobe Acrobat Update Service</Data>
    <Data Name="param2"></Data>
    <Binary>410064006F0062006500410052004D0073006500720076006900630065002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:05
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:05.698433700Z" />
    <EventRecordID>35375</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="544" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>4C0061006E006D0061006E0057006F0072006B00730074006100740069006F006E002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:05
 :   7036
 :
:       
 :
:  /
:     -
:
 " Windows"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:05.678433600Z" />
    <EventRecordID>35374</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="544" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> Windows</Data>
    <Data Name="param2"></Data>
    <Binary>4D00700073005300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:05
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:05.368433200Z" />
    <EventRecordID>35373</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="548" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>4200460045002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:05
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:05.258433000Z" />
    <EventRecordID>35372</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="548" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>530070006F006F006C00650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:05
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:05.198433000Z" />
    <EventRecordID>35371</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="548" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>5300630068006500640075006C0065002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:04
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:04.088431400Z" />
    <EventRecordID>35370</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1084" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>5300680065006C006C004800570044006500740065006300740069006F006E002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-WLAN-AutoConfig
:          16.03.2014 0:57:03
 :   4000
 :
:       
 :
:  
:     -
:
     .

Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-WLAN-AutoConfig" Guid="{9580D7DD-0379-4658-9870-D5BE7D52D6DE}" />
    <EventID>4000</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>1</Opcode>
    <Keywords>0x4000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:03.675630200Z" />
    <EventRecordID>35369</EventRecordID>
    <Correlation />
    <Execution ProcessID="820" ThreadID="1052" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:03
 :   7036
 :
:       
 :
:  /
:     -
:
 "  WLAN"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:03.675630200Z" />
    <EventRecordID>35368</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1084" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  WLAN</Data>
    <Data Name="param2"></Data>
    <Binary>57006C0061006E007300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:02
 :   7036
 :
:       
 :
:  /
:     -
:
 "    (EAP)"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:02.958028900Z" />
    <EventRecordID>35367</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="548" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">    (EAP)</Data>
    <Data Name="param2"></Data>
    <Binary>45006100700048006F00730074002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:02
 :   7036
 :
:       
 :
:  /
:     -
:
 "DNS-"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:02.864428800Z" />
    <EventRecordID>35366</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="548" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">DNS-</Data>
    <Data Name="param2"></Data>
    <Binary>44006E007300630061006300680065002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:02
 :   7036
 :
:       
 :
:  /
:     -
:
 "  CNG"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:02.848828700Z" />
    <EventRecordID>35365</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="568" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  CNG</Data>
    <Data Name="param2"></Data>
    <Binary>4B0065007900490073006F002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:02
 :   7036
 :
:       
 :
:  /
:     -
:
 "DHCP-"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:02.848828700Z" />
    <EventRecordID>35364</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="548" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">DHCP-</Data>
    <Data Name="param2"></Data>
    <Binary>44006800630070002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-DHCPv6-Client
:          16.03.2014 0:57:02
 :   51046
 :  
:       
 :
:  LOCAL SERVICE
:     -
:
  DHCPv6 
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-DHCPv6-Client" Guid="{6A1F2B00-6A90-4C38-95A5-5CAB3B056778}" />
    <EventID>51046</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>4</Task>
    <Opcode>62</Opcode>
    <Keywords>0x2000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:02.833228700Z" />
    <EventRecordID>35363</EventRecordID>
    <Correlation />
    <Execution ProcessID="784" ThreadID="292" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-Dhcp-Client
:          16.03.2014 0:57:02
 :   50036
 :  
:       
 :
:  LOCAL SERVICE
:     -
:
  DHCPv4 
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Dhcp-Client" Guid="{15A7A4F8-0072-4EAB-ABAD-F98A4D666AED}" />
    <EventID>50036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>4</Task>
    <Opcode>68</Opcode>
    <Keywords>0x2000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:02.833228700Z" />
    <EventRecordID>35362</EventRecordID>
    <Correlation />
    <Execution ProcessID="784" ThreadID="924" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:02
 :   7036
 :
:       
 :
:  /
:     -
:
 "  NetBIOS  TCP/IP"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:02.833228700Z" />
    <EventRecordID>35361</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="548" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  NetBIOS  TCP/IP</Data>
    <Data Name="param2"></Data>
    <Binary>6C006D0068006F007300740073002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:02
 :   7036
 :
:       
 :
:  /
:     -
:
 "   "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:02.833228700Z" />
    <EventRecordID>35360</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="568" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   </Data>
    <Data Name="param2"></Data>
    <Binary>6E00730069002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:02
 :   7036
 :
:       
 :
:  /
:     -
:
 "   "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:02.349627900Z" />
    <EventRecordID>35359</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="568" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   </Data>
    <Data Name="param2"></Data>
    <Binary>530061006D00530073002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:02
 :   7036
 :
:       
 :
:  /
:     -
:
 "     "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:02.349627900Z" />
    <EventRecordID>35358</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="568" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">     </Data>
    <Data Name="param2"></Data>
    <Binary>5500780053006D0073002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:02
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:02.349627900Z" />
    <EventRecordID>35357</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="548" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>43007300630053006500720076006900630065002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:02
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:02.349627900Z" />
    <EventRecordID>35356</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="568" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>670070007300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:02
 :   7036
 :
:       
 :
:  /
:     -
:
 "    "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:02.224827700Z" />
    <EventRecordID>35355</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="548" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">    </Data>
    <Data Name="param2"></Data>
    <Binary>530045004E0053002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:02
 :   7036
 :
:       
 :
:  /
:     -
:
 "  COM+"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:02.209227600Z" />
    <EventRecordID>35354</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="548" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  COM+</Data>
    <Data Name="param2"></Data>
    <Binary>4500760065006E007400530079007300740065006D002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:02
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:02.193627600Z" />
    <EventRecordID>35353</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="548" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>500072006F0066005300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:02
 :   7036
 :
:       
 :
:  /
:     -
:
 ""    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:02.178027600Z" />
    <EventRecordID>35352</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="548" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"></Data>
    <Data Name="param2"></Data>
    <Binary>5400680065006D00650073002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:02
 :   7036
 :
:       
 :
:  /
:     -
:
 "Windows Audio"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:02.162427500Z" />
    <EventRecordID>35351</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="548" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">Windows Audio</Data>
    <Data Name="param2"></Data>
    <Binary>41007500640069006F005300720076002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:02
 :   7036
 :
:       
 :
:  /
:     -
:
 "    Windows Audio"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:02.100027400Z" />
    <EventRecordID>35350</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="568" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">    Windows Audio</Data>
    <Data Name="param2"></Data>
    <Binary>41007500640069006F0045006E00640070006F0069006E0074004200750069006C006400650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:01
 :   7036
 :
:       
 :
:  /
:     -
:
 "   Windows"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:01.491626400Z" />
    <EventRecordID>35349</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="548" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   Windows</Data>
    <Data Name="param2"></Data>
    <Binary>46006F006E007400430061006300680065002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:01
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:01.273226000Z" />
    <EventRecordID>35348</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="548" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>4D004D004300530053002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:01
 :   7036
 :
:       
 :
:  /
:     -
:
 "  Windows"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:01.195225800Z" />
    <EventRecordID>35347</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="568" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  Windows</Data>
    <Data Name="param2"></Data>
    <Binary>6500760065006E0074006C006F0067002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:00
 :   7036
 :
:       
 :
:  /
:     -
:
 "   (RPC)"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:00.976825500Z" />
    <EventRecordID>35346</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="568" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   (RPC)</Data>
    <Data Name="param2"></Data>
    <Binary>520070006300530073002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:00
 :   7036
 :
:       
 :
:  /
:     -
:
 "   RPC"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:00.961225400Z" />
    <EventRecordID>35345</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="568" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   RPC</Data>
    <Data Name="param2"></Data>
    <Binary>5200700063004500700074004D00610070007000650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:00
 :   7036
 :
:       
 :
:  /
:     -
:
 "   DCOM-"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:00.852025200Z" />
    <EventRecordID>35344</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="568" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   DCOM-</Data>
    <Data Name="param2"></Data>
    <Binary>440063006F006D004C00610075006E00630068002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-FilterManager
:          16.03.2014 0:57:00
 :   6
 :
:       
 :
:  
:     -
:
   "luafv" ( 6.1, ?2009?-?07?-?14T07:26:13.000000000Z)       .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-FilterManager" Guid="{F3C5E28E-63F6-49C7-A204-E48A1BC4B09D}" />
    <EventID>6</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:00.836425200Z" />
    <EventRecordID>35343</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="52" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="FinalStatus">0x0</Data>
    <Data Name="DeviceVersionMajor">6</Data>
    <Data Name="DeviceVersionMinor">1</Data>
    <Data Name="DeviceNameLength">5</Data>
    <Data Name="DeviceName">luafv</Data>
    <Data Name="DeviceTime">2009-07-14T07:26:13.000000000Z</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:00
 :   7036
 :
:       
 :
:  /
:     -
:
 ""    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:00.820825200Z" />
    <EventRecordID>35342</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="548" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"></Data>
    <Data Name="param2"></Data>
    <Binary>50006F007700650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-UserPnp
:          16.03.2014 0:57:00
 :   20010
 :(7010)
:       
 :
:  
:     -
:
     (Plug and Play). 

   PlugPlay: "true" 
   PlugPlay: "true" 

Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-UserPnp" Guid="{96F4A050-7E31-453C-88BE-9634F4E02139}" />
    <EventID>20010</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>7010</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:00.742825100Z" />
    <EventRecordID>35341</EventRecordID>
    <Correlation />
    <Execution ProcessID="604" ThreadID="636" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <UserData>
    <INFO_PNP_STATE xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://manifests.microsoft.com/win/2004/08/windows/userpnp">
      <InstallSubsystemState>true</InstallSubsystemState>
      <CachingSubsystemState>true</CachingSubsystemState>
    </INFO_PNP_STATE>
  </UserData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:57:00
 :   7036
 :
:       
 :
:  /
:     -
:
 "Plug-and-Play"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:00.742825100Z" />
    <EventRecordID>35340</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="548" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">Plug-and-Play</Data>
    <Data Name="param2"></Data>
    <Binary>50006C007500670050006C00610079002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-Kernel-Processor-Power
:          16.03.2014 0:56:56
 :   26
 :(4)
:       
 :
:  
:     -
:
 1   0   :  : 

3,  : 
3,   : 
8
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Kernel-Processor-Power" Guid="{0F67E49F-FE51-4E9F-B490-6F2948CC6027}" />
    <EventID>26</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>4</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:56:56.718018000Z" />
    <EventRecordID>35339</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="52" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="Group">0</Data>
    <Data Name="Number">1</Data>
    <Data Name="IdleStateCount">3</Data>
    <Data Name="PerfStateCount">3</Data>
    <Data Name="ThrottleStateCount">8</Data>
    <ComplexData Name="IdleState">010203</ComplexData>
    <ComplexData Name="PerfState">3408000064000000400600004C000000B004000039000000</ComplexData>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-Kernel-Processor-Power
:          16.03.2014 0:56:56
 :   26
 :(4)
:       
 :
:  
:     -
:
 0   0   :  : 

3,  : 
3,   : 
8
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Kernel-Processor-Power" Guid="{0F67E49F-FE51-4E9F-B490-6F2948CC6027}" />
    <EventID>26</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>4</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:56:56.499617600Z" />
    <EventRecordID>35338</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="52" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="Group">0</Data>
    <Data Name="Number">0</Data>
    <Data Name="IdleStateCount">3</Data>
    <Data Name="PerfStateCount">3</Data>
    <Data Name="ThrottleStateCount">8</Data>
    <ComplexData Name="IdleState">010203</ComplexData>
    <ComplexData Name="PerfState">3408000064000000400600004C000000B004000039000000</ComplexData>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-Kernel-Power
:          16.03.2014 0:56:54
 :   89
 :(86)
:       
 :(32)
:  
:     -
:
    ACPI ACPI\ThermalZone\THRM.             
_PSV = 378             
_TC1 = 2             
_TC2 = 3             
_TSP = 4000             
_AC0 = 0             
_AC1 = 0             
_AC2 = 0             
_AC3 = 0             
_AC4 = 0             
_AC5 = 0             
_AC6 = 0             
_AC7 = 0             
_AC8 = 0             
_AC9 = 0             
_CRT = 381             
_HOT = 0             
_PSL - .  .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
    <EventID>89</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>86</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000020</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:56:54.268813700Z" />
    <EventRecordID>35337</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="60" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="ThermalZoneDeviceInstanceLength">21</Data>
    <Data Name="ThermalZoneDeviceInstance">ACPI\ThermalZone\THRM</Data>
    <Data Name="AffinityCount">1</Data>
    <Data Name="_PSV">378</Data>
    <Data Name="_TC1">2</Data>
    <Data Name="_TC2">3</Data>
    <Data Name="_TSP">4000</Data>
    <Data Name="_AC0">0</Data>
    <Data Name="_AC1">0</Data>
    <Data Name="_AC2">0</Data>
    <Data Name="_AC3">0</Data>
    <Data Name="_AC4">0</Data>
    <Data Name="_AC5">0</Data>
    <Data Name="_AC6">0</Data>
    <Data Name="_AC7">0</Data>
    <Data Name="_AC8">0</Data>
    <Data Name="_AC9">0</Data>
    <Data Name="_CRT">381</Data>
    <Data Name="_HOT">0</Data>
    <ComplexData Name="_PSL">0000000000000000</ComplexData>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-FilterManager
:          16.03.2014 0:56:50
 :   6
 :
:       
 :
:  
:     -
:
   "FileInfo" ( 6.1, ?2009?-?07?-?14T07:34:25.000000000Z)       .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-FilterManager" Guid="{F3C5E28E-63F6-49C7-A204-E48A1BC4B09D}" />
    <EventID>6</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:56:50.010006200Z" />
    <EventRecordID>35336</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="8" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="FinalStatus">0x0</Data>
    <Data Name="DeviceVersionMajor">6</Data>
    <Data Name="DeviceVersionMinor">1</Data>
    <Data Name="DeviceNameLength">8</Data>
    <Data Name="DeviceName">FileInfo</Data>
    <Data Name="DeviceTime">2009-07-14T07:34:25.000000000Z</Data>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-Kernel-General
:          16.03.2014 0:56:46
 :   12
 :
:       
 :
:  
:     -
:
    : ?2014?-?03?-?15T16:56:46.375199800Z.
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Kernel-General" Guid="{A68CA8B7-004F-D7B6-A698-07E2DE0F1F5D}" />
    <EventID>12</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:56:46.671600300Z" />
    <EventRecordID>35335</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="8" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="MajorVersion">6</Data>
    <Data Name="MinorVersion">1</Data>
    <Data Name="BuildVersion">7601</Data>
    <Data Name="QfeVersion">18247</Data>
    <Data Name="ServiceVersion">1</Data>
    <Data Name="BootMode">0</Data>
    <Data Name="StartTime">2014-03-15T16:56:46.375199800Z</Data>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-Kernel-General
:          16.03.2014 0:56:27
 :   13
 :
:       
 :
:  /
:     -
:
     : ?2014?-?03?-?15T16:56:27.088878500Z.
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Kernel-General" Guid="{A68CA8B7-004F-D7B6-A698-07E2DE0F1F5D}" />
    <EventID>13</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:56:27.088878500Z" />
    <EventRecordID>35334</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="40" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="StopTime">2014-03-15T16:56:27.088878500Z</Data>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-Kernel-Power
:          16.03.2014 0:56:22
 :   109
 :(103)
:       
 :(4)
:  /
:     -
:
     .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
    <EventID>109</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>103</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000004</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:56:22.564870500Z" />
    <EventRecordID>35333</EventRecordID>
    <Correlation />
    <Execution ProcessID="360" ThreadID="364" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="ShutdownActionType">5</Data>
    <Data Name="ShutdownEventCode">0</Data>
    <Data Name="ShutdownReason">0</Data>
  </EventData>
</Event>

 :   System
:      EventLog
:          16.03.2014 0:57:01
 :   6013
 :
:       
 :
:  /
:     -
:
   14 .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="EventLog" />
    <EventID Qualifiers="32768">6013</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:01.000000000Z" />
    <EventRecordID>35332</EventRecordID>
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>14</Data>
    <Data>60</Data>
    <Data>-480   ()</Data>
    <Binary>31002E003100000030000000570069006E0064006F007700730020003700200055006C00740069006D00610074006500000036002E0031002E00370036003000310020004200750069006C006400200037003600300031002000530065007200760069006300650020005000610063006B002000310000004D0075006C0074006900700072006F0063006500730073006F00720020004600720065006500000037003600300031002E00770069006E0037007300700031005F006700640072002E003100330030003800320038002D00310035003300320000003500320063003300330036006600320000004E006F007400200041007600610069006C00610062006C00650000004E006F007400200041007600610069006C00610062006C006500000039000000320000003400300036003100000034003100390000001E043B044F042D001F041A0400000000</Binary>
  </EventData>
</Event>

 :   System
:      EventLog
:          16.03.2014 0:57:01
 :   6005
 :
:       
 :
:  /
:     -
:
   .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="EventLog" />
    <EventID Qualifiers="32768">6005</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:01.000000000Z" />
    <EventRecordID>35331</EventRecordID>
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Binary>DE07030006000F0010003900010065000000000000000000</Binary>
  </EventData>
</Event>

 :   System
:      EventLog
:          16.03.2014 0:57:01
 :   6009
 :
:       
 :
:  /
:     -
:
Microsoft (R) Windows (R) 6.01. 7601 Service Pack 1 Multiprocessor Free.
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="EventLog" />
    <EventID Qualifiers="32768">6009</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:57:01.000000000Z" />
    <EventRecordID>35330</EventRecordID>
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data>6.01.</Data>
    <Data>7601</Data>
    <Data>Service Pack 1</Data>
    <Data>Multiprocessor Free</Data>
    <Data>17514</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:56:22
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:56:22.096869700Z" />
    <EventRecordID>35329</EventRecordID>
    <Correlation />
    <Execution ProcessID="408" ThreadID="552" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>430072007900700074005300760063002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:56:21
 :   7036
 :
:       
 :
:  /
:     -
:
 "  Windows"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:56:21.613268900Z" />
    <EventRecordID>35328</EventRecordID>
    <Correlation />
    <Execution ProcessID="408" ThreadID="552" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  Windows</Data>
    <Data Name="param2"></Data>
    <Binary>6500760065006E0074006C006F0067002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:56:21
 :   7036
 :
:       
 :
:  /
:     -
:
 "  Windows"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:56:21.566468800Z" />
    <EventRecordID>35327</EventRecordID>
    <Correlation />
    <Execution ProcessID="408" ThreadID="552" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  Windows</Data>
    <Data Name="param2"></Data>
    <Binary>570069006E006D0067006D0074002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:56:21
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:56:21.550868800Z" />
    <EventRecordID>35326</EventRecordID>
    <Correlation />
    <Execution ProcessID="408" ThreadID="552" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>500072006F0066005300760063002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:56:21
 :   7036
 :
:       
 :
:  /
:     -
:
 " Windows"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:56:21.535268700Z" />
    <EventRecordID>35325</EventRecordID>
    <Correlation />
    <Execution ProcessID="408" ThreadID="552" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> Windows</Data>
    <Data Name="param2"></Data>
    <Binary>570069006E0044006500660065006E0064002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:56:21
 :   7036
 :
:       
 :
:  /
:     -
:
 "Plug-and-Play"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:56:21.535268700Z" />
    <EventRecordID>35324</EventRecordID>
    <Correlation />
    <Execution ProcessID="408" ThreadID="552" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">Plug-and-Play</Data>
    <Data Name="param2"></Data>
    <Binary>50006C007500670050006C00610079002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-UserPnp
:          16.03.2014 0:56:21
 :   20010
 :(7010)
:       
 :
:  
:     -
:
     (Plug and Play). 

   PlugPlay: "false" 
   PlugPlay: "false" 

Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-UserPnp" Guid="{96F4A050-7E31-453C-88BE-9634F4E02139}" />
    <EventID>20010</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>7010</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:56:21.535268700Z" />
    <EventRecordID>35323</EventRecordID>
    <Correlation />
    <Execution ProcessID="572" ThreadID="872" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <UserData>
    <INFO_PNP_STATE xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://manifests.microsoft.com/win/2004/08/windows/userpnp">
      <InstallSubsystemState>false</InstallSubsystemState>
      <CachingSubsystemState>false</CachingSubsystemState>
    </INFO_PNP_STATE>
  </UserData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:56:21
 :   7036
 :
:       
 :
:  /
:     -
:
 ""    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:56:21.504068700Z" />
    <EventRecordID>35322</EventRecordID>
    <Correlation />
    <Execution ProcessID="408" ThreadID="552" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"></Data>
    <Data Name="param2"></Data>
    <Binary>50006F007700650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      EventLog
:          16.03.2014 0:56:21
 :   6006
 :
:       
 :
:  /
:     -
:
   .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="EventLog" />
    <EventID Qualifiers="32768">6006</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:56:21.000000000Z" />
    <EventRecordID>35321</EventRecordID>
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Binary>0100000000000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-Winlogon
:          16.03.2014 0:56:21
 :   7002
 :(1102)
:       
 :
:  
:     -
:
        
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Winlogon" Guid="{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}" />
    <EventID>7002</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>1102</Task>
    <Opcode>0</Opcode>
    <Keywords>0x2000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:56:21.238868200Z" />
    <EventRecordID>35320</EventRecordID>
    <Correlation />
    <Execution ProcessID="512" ThreadID="252" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="TSId">1</Data>
    <Data Name="UserSid">S-1-5-21-3368229806-3106785895-14530972-1003</Data>
  </EventData>
</Event>

 :   System
:      USER32
:          16.03.2014 0:56:21
 :   1074
 :
:       
 :
:  -\User
:     -
:
 C:\Windows\system32\winlogon.exe (-)   ""   -    -\User  :   
  : 0x500ff
  : 
 : 
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="USER32" />
    <EventID Qualifiers="32768">1074</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:56:21.000000000Z" />
    <EventRecordID>35319</EventRecordID>
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-21-3368229806-3106785895-14530972-1003" />
  </System>
  <EventData>
    <Data>C:\Windows\system32\winlogon.exe (-)</Data>
    <Data>-</Data>
    <Data>  </Data>
    <Data>0x500ff</Data>
    <Data></Data>
    <Data>
    </Data>
    <Data>-\User</Data>
    <Binary>FF000500000000000000000000000000000000000000000000000000000000000000000000000000</Binary>
  </EventData>
</Event>

 :   System
:      USER32
:          16.03.2014 0:56:19
 :   1074
 :
:       
 :
:  -\User
:     -
:
 explorer.exe   ""   -    -\User  :  ()
  : 0x0
  : 
 : 
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="USER32" />
    <EventID Qualifiers="32768">1074</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:56:19.000000000Z" />
    <EventRecordID>35318</EventRecordID>
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-21-3368229806-3106785895-14530972-1003" />
  </System>
  <EventData>
    <Data>explorer.exe</Data>
    <Data>-</Data>
    <Data> ()</Data>
    <Data>0x0</Data>
    <Data></Data>
    <Data>
    </Data>
    <Data>-\User</Data>
    <Binary>00000000000000000000000000000000000000000000000000000000000000000000000000000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:55:22
 :   7036
 :
:       
 :
:  /
:     -
:
 " Windows"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:55:22.547041400Z" />
    <EventRecordID>35317</EventRecordID>
    <Correlation />
    <Execution ProcessID="408" ThreadID="552" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> Windows</Data>
    <Data Name="param2"></Data>
    <Binary>570069006E0044006500660065006E0064002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-DistributedCOM
:          16.03.2014 0:55:08
 :   10005
 :
:       
 :
:  /
:     -
:
 DCOM "1084"     gupdate   "/comsvc"   :
{4EB61BAC-A3B6-4760-9581-655041EF4D69}
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="49152">10005</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:55:08.000000000Z" />
    <EventRecordID>35316</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">1084</Data>
    <Data Name="param2">gupdate</Data>
    <Data Name="param3">/comsvc</Data>
    <Data Name="param4">{4EB61BAC-A3B6-4760-9581-655041EF4D69}</Data>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-DistributedCOM
:          16.03.2014 0:55:08
 :   10005
 :
:       
 :
:  /
:     -
:
 DCOM "1084"     gupdatem   "/comsvc"   :
{9465B4B4-5216-4042-9A2C-754D3BCDC410}
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="49152">10005</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:55:08.000000000Z" />
    <EventRecordID>35315</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">1084</Data>
    <Data Name="param2">gupdatem</Data>
    <Data Name="param3">/comsvc</Data>
    <Data Name="param4">{9465B4B4-5216-4042-9A2C-754D3BCDC410}</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:54:51
 :   7001
 :
:       
 :
:  /
:     -
:
 "  "     "    ",     -  
    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7001</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:54:51.877875300Z" />
    <EventRecordID>35314</EventRecordID>
    <Correlation />
    <Execution ProcessID="408" ThreadID="548" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2">    </Data>
    <Data Name="param3">%%1068</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:54:35
 :   7001
 :
:       
 :
:  /
:     -
:
 "  "     "    ",     -  
    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7001</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:54:35.051383600Z" />
    <EventRecordID>35313</EventRecordID>
    <Correlation />
    <Execution ProcessID="408" ThreadID="552" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2">    </Data>
    <Data Name="param3">%%1068</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:54:35
 :   7001
 :
:       
 :
:  /
:     -
:
 "  "     "    ",     -  
    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7001</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:54:35.051383600Z" />
    <EventRecordID>35312</EventRecordID>
    <Correlation />
    <Execution ProcessID="408" ThreadID="552" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2">    </Data>
    <Data Name="param3">%%1068</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:54:35
 :   7001
 :
:       
 :
:  /
:     -
:
 "  "     "    ",     -  
    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7001</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:54:35.051383600Z" />
    <EventRecordID>35311</EventRecordID>
    <Correlation />
    <Execution ProcessID="408" ThreadID="548" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2">    </Data>
    <Data Name="param3">%%1068</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:54:35
 :   7001
 :
:       
 :
:  /
:     -
:
 "  "     "    ",     -  
    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7001</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:54:35.051383600Z" />
    <EventRecordID>35310</EventRecordID>
    <Correlation />
    <Execution ProcessID="408" ThreadID="548" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2">    </Data>
    <Data Name="param3">%%1068</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:54:35
 :   7001
 :
:       
 :
:  /
:     -
:
 "  "     "    ",     -  
    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7001</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:54:35.020183600Z" />
    <EventRecordID>35309</EventRecordID>
    <Correlation />
    <Execution ProcessID="408" ThreadID="548" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2">    </Data>
    <Data Name="param3">%%1068</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:54:35
 :   7001
 :
:       
 :
:  /
:     -
:
 "  "     "    ",     -  
    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7001</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:54:35.020183600Z" />
    <EventRecordID>35308</EventRecordID>
    <Correlation />
    <Execution ProcessID="408" ThreadID="552" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2">    </Data>
    <Data Name="param3">%%1068</Data>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-DistributedCOM
:          16.03.2014 0:54:34
 :   10005
 :
:       
 :
:  /
:     -
:
 DCOM "1084"     WSearch   ""   :
{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="49152">10005</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:54:34.000000000Z" />
    <EventRecordID>35307</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">1084</Data>
    <Data Name="param2">WSearch</Data>
    <Data Name="param3">
    </Data>
    <Data Name="param4">{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}</Data>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-DistributedCOM
:          16.03.2014 0:54:33
 :   10005
 :
:       
 :
:  /
:     -
:
 DCOM "1084"     WSearch   ""   :
{9E175B6D-F52A-11D8-B9A5-505054503030}
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="49152">10005</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:54:33.000000000Z" />
    <EventRecordID>35306</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">1084</Data>
    <Data Name="param2">WSearch</Data>
    <Data Name="param3">
    </Data>
    <Data Name="param4">{9E175B6D-F52A-11D8-B9A5-505054503030}</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:54:33
 :   7001
 :
:       
 :
:  /
:     -
:
 "  "     "    ",     -  
    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7001</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:54:33.179380300Z" />
    <EventRecordID>35305</EventRecordID>
    <Correlation />
    <Execution ProcessID="408" ThreadID="548" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2">    </Data>
    <Data Name="param3">%%1068</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:54:33
 :   7001
 :
:       
 :
:  /
:     -
:
 "  "     "    ",     -  
    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7001</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:54:33.163780300Z" />
    <EventRecordID>35304</EventRecordID>
    <Correlation />
    <Execution ProcessID="408" ThreadID="552" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2">    </Data>
    <Data Name="param3">%%1068</Data>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-DistributedCOM
:          16.03.2014 0:54:33
 :   10005
 :
:       
 :
:  /
:     -
:
 DCOM "1068"     netprofm   ""   :
{A47979D2-C419-11D9-A5B4-001185AD2B89}
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="49152">10005</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:54:33.000000000Z" />
    <EventRecordID>35303</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">1068</Data>
    <Data Name="param2">netprofm</Data>
    <Data Name="param3">
    </Data>
    <Data Name="param4">{A47979D2-C419-11D9-A5B4-001185AD2B89}</Data>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-DistributedCOM
:          16.03.2014 0:54:33
 :   10005
 :
:       
 :
:  /
:     -
:
 DCOM "1068"     netman   ""   :
{BA126AD1-2166-11D1-B1D0-00805FC1270E}
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="49152">10005</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:54:33.000000000Z" />
    <EventRecordID>35302</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">1068</Data>
    <Data Name="param2">netman</Data>
    <Data Name="param3">
    </Data>
    <Data Name="param4">{BA126AD1-2166-11D1-B1D0-00805FC1270E}</Data>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-DistributedCOM
:          16.03.2014 0:54:32
 :   10005
 :
:       
 :
:  /
:     -
:
 DCOM "1084"     EventSystem   ""   :
{1BE1F766-5536-11D1-B726-00C04FB926AF}
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="49152">10005</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:54:32.000000000Z" />
    <EventRecordID>35301</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">1084</Data>
    <Data Name="param2">EventSystem</Data>
    <Data Name="param3">
    </Data>
    <Data Name="param4">{1BE1F766-5536-11D1-B726-00C04FB926AF}</Data>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-DistributedCOM
:          16.03.2014 0:54:26
 :   10005
 :
:       
 :
:  /
:     -
:
 DCOM "1084"     ShellHWDetection   ""   :
{DD522ACC-F821-461A-A407-50B198B896DC}
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="49152">10005</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:54:26.000000000Z" />
    <EventRecordID>35300</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">1084</Data>
    <Data Name="param2">ShellHWDetection</Data>
    <Data Name="param3">
    </Data>
    <Data Name="param4">{DD522ACC-F821-461A-A407-50B198B896DC}</Data>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-Winlogon
:          16.03.2014 0:53:25
 :   7001
 :(1101)
:       
 :
:  
:     -
:
        
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Winlogon" Guid="{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}" />
    <EventID>7001</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>1101</Task>
    <Opcode>0</Opcode>
    <Keywords>0x2000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:53:25.834062100Z" />
    <EventRecordID>35299</EventRecordID>
    <Correlation ActivityID="{67144949-5132-4859-8036-A737B43825D8}" />
    <Execution ProcessID="512" ThreadID="524" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="TSId">1</Data>
    <Data Name="UserSid">S-1-5-21-3368229806-3106785895-14530972-1003</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:53:22
 :   7026
 :
:       
 :
:  /
:     -
:
   ()    : 
AFD
CSC
DfsC
discache
NetBIOS
NetBT
nsiproxy
Psched
rdbss
spldr
tdx
vwififlt
Wanarpv6
WfpLwf
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7026</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:53:22.168055600Z" />
    <EventRecordID>35298</EventRecordID>
    <Correlation />
    <Execution ProcessID="408" ThreadID="412" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">
AFD
CSC
DfsC
discache
NetBIOS
NetBT
nsiproxy
Psched
rdbss
spldr
tdx
vwififlt
Wanarpv6
WfpLwf</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:53:22
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:53:22.152455600Z" />
    <EventRecordID>35297</EventRecordID>
    <Correlation />
    <Execution ProcessID="408" ThreadID="552" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>430072007900700074005300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:53:22
 :   7036
 :
:       
 :
:  /
:     -
:
 "  Windows"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:53:22.152455600Z" />
    <EventRecordID>35296</EventRecordID>
    <Correlation />
    <Execution ProcessID="408" ThreadID="552" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  Windows</Data>
    <Data Name="param2"></Data>
    <Binary>570069006E006D0067006D0074002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:53:22
 :   7001
 :
:       
 :
:  /
:     -
:
 "    "     "   ",     -  
    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7001</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:53:22.152455600Z" />
    <EventRecordID>35295</EventRecordID>
    <Correlation />
    <Execution ProcessID="408" ThreadID="412" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">    </Data>
    <Data Name="param2">   </Data>
    <Data Name="param3">%%1068</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:53:22
 :   7001
 :
:       
 :
:  /
:     -
:
 "- SMB 2.0"     "   - SMB",     -  
    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7001</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:53:22.152455600Z" />
    <EventRecordID>35294</EventRecordID>
    <Correlation />
    <Execution ProcessID="408" ThreadID="412" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">- SMB 2.0</Data>
    <Data Name="param2">   - SMB</Data>
    <Data Name="param3">%%1068</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:53:22
 :   7001
 :
:       
 :
:  /
:     -
:
 "- SMB 1.x"     "   - SMB",     -  
    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7001</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:53:22.152455600Z" />
    <EventRecordID>35293</EventRecordID>
    <Correlation />
    <Execution ProcessID="408" ThreadID="412" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">- SMB 1.x</Data>
    <Data Name="param2">   - SMB</Data>
    <Data Name="param3">%%1068</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:53:22
 :   7001
 :
:       
 :
:  /
:     -
:
 "   - SMB"     "  ",     -  
     .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7001</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:53:22.152455600Z" />
    <EventRecordID>35292</EventRecordID>
    <Correlation />
    <Execution ProcessID="408" ThreadID="412" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   - SMB</Data>
    <Data Name="param2">  </Data>
    <Data Name="param3">%%31</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:53:22
 :   7001
 :
:       
 :
:  /
:     -
:
 "  IP"     "   ",     -  
    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7001</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:53:22.152455600Z" />
    <EventRecordID>35291</EventRecordID>
    <Correlation />
    <Execution ProcessID="408" ThreadID="412" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  IP</Data>
    <Data Name="param2">   </Data>
    <Data Name="param3">%%1068</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:53:22
 :   7001
 :
:       
 :
:  /
:     -
:
 " "     "   ",     -  
    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7001</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:53:22.136855600Z" />
    <EventRecordID>35290</EventRecordID>
    <Correlation />
    <Execution ProcessID="408" ThreadID="412" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2">   </Data>
    <Data Name="param3">%%1068</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:53:22
 :   7036
 :
:       
 :
:  /
:     -
:
 "  CNG"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:53:22.136855600Z" />
    <EventRecordID>35289</EventRecordID>
    <Correlation />
    <Execution ProcessID="408" ThreadID="568" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  CNG</Data>
    <Data Name="param2"></Data>
    <Binary>4B0065007900490073006F002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:53:22
 :   7001
 :
:       
 :
:  /
:     -
:
 "   "     "NSI proxy service driver.",     -  
     .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7001</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:53:22.136855600Z" />
    <EventRecordID>35288</EventRecordID>
    <Correlation />
    <Execution ProcessID="408" ThreadID="412" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   </Data>
    <Data Name="param2">NSI proxy service driver.</Data>
    <Data Name="param3">%%31</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:53:22
 :   7001
 :
:       
 :
:  /
:     -
:
 "  NetBIOS  TCP/IP"     "Ancillary Function Driver for Winsock",     -  
     .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7001</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:53:22.136855600Z" />
    <EventRecordID>35287</EventRecordID>
    <Correlation />
    <Execution ProcessID="408" ThreadID="412" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  NetBIOS  TCP/IP</Data>
    <Data Name="param2">Ancillary Function Driver for Winsock</Data>
    <Data Name="param3">%%31</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:53:22
 :   7001
 :
:       
 :
:  /
:     -
:
 "DNS-"     "  NetIO Legacy TDI",     -  
     .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7001</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:53:22.136855600Z" />
    <EventRecordID>35286</EventRecordID>
    <Correlation />
    <Execution ProcessID="408" ThreadID="412" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">DNS-</Data>
    <Data Name="param2">  NetIO Legacy TDI</Data>
    <Data Name="param3">%%31</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:53:22
 :   7001
 :
:       
 :
:  /
:     -
:
 "DHCP-"     "Ancillary Function Driver for Winsock",     -  
     .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7001</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:53:22.136855600Z" />
    <EventRecordID>35285</EventRecordID>
    <Correlation />
    <Execution ProcessID="408" ThreadID="412" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">DHCP-</Data>
    <Data Name="param2">Ancillary Function Driver for Winsock</Data>
    <Data Name="param3">%%31</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:53:22
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:53:22.136855600Z" />
    <EventRecordID>35284</EventRecordID>
    <Correlation />
    <Execution ProcessID="408" ThreadID="568" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>500072006F0066005300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:53:22
 :   7036
 :
:       
 :
:  /
:     -
:
 "  Windows"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:53:22.043255400Z" />
    <EventRecordID>35283</EventRecordID>
    <Correlation />
    <Execution ProcessID="408" ThreadID="568" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  Windows</Data>
    <Data Name="param2"></Data>
    <Binary>6500760065006E0074006C006F0067002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:53:21
 :   7036
 :
:       
 :
:  /
:     -
:
 "   (RPC)"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:53:21.949655200Z" />
    <EventRecordID>35282</EventRecordID>
    <Correlation />
    <Execution ProcessID="408" ThreadID="548" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   (RPC)</Data>
    <Data Name="param2"></Data>
    <Binary>520070006300530073002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:53:21
 :   7036
 :
:       
 :
:  /
:     -
:
 "   RPC"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:53:21.918455200Z" />
    <EventRecordID>35281</EventRecordID>
    <Correlation />
    <Execution ProcessID="408" ThreadID="548" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   RPC</Data>
    <Data Name="param2"></Data>
    <Binary>5200700063004500700074004D00610070007000650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:53:21
 :   7036
 :
:       
 :
:  /
:     -
:
 "   DCOM-"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:53:21.918455200Z" />
    <EventRecordID>35280</EventRecordID>
    <Correlation />
    <Execution ProcessID="408" ThreadID="548" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   DCOM-</Data>
    <Data Name="param2"></Data>
    <Binary>440063006F006D004C00610075006E00630068002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:53:21
 :   7036
 :
:       
 :
:  /
:     -
:
 ""    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:53:21.887255100Z" />
    <EventRecordID>35279</EventRecordID>
    <Correlation />
    <Execution ProcessID="408" ThreadID="548" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"></Data>
    <Data Name="param2"></Data>
    <Binary>50006F007700650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-UserPnp
:          16.03.2014 0:53:21
 :   20010
 :(7010)
:       
 :
:  
:     -
:
     (Plug and Play). 

   PlugPlay: "true" 
   PlugPlay: "true" 

Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-UserPnp" Guid="{96F4A050-7E31-453C-88BE-9634F4E02139}" />
    <EventID>20010</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>7010</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:53:21.824855000Z" />
    <EventRecordID>35278</EventRecordID>
    <Correlation />
    <Execution ProcessID="572" ThreadID="588" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <UserData>
    <INFO_PNP_STATE xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://manifests.microsoft.com/win/2004/08/windows/userpnp">
      <InstallSubsystemState>true</InstallSubsystemState>
      <CachingSubsystemState>true</CachingSubsystemState>
    </INFO_PNP_STATE>
  </UserData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:53:21
 :   7036
 :
:       
 :
:  /
:     -
:
 "Plug-and-Play"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:53:21.824855000Z" />
    <EventRecordID>35277</EventRecordID>
    <Correlation />
    <Execution ProcessID="408" ThreadID="548" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">Plug-and-Play</Data>
    <Data Name="param2"></Data>
    <Binary>50006C007500670050006C00610079002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-Kernel-Power
:          16.03.2014 0:53:04
 :   89
 :(86)
:       
 :(32)
:  
:     -
:
    ACPI ACPI\ThermalZone\THRM.             
_PSV = 378             
_TC1 = 2             
_TC2 = 3             
_TSP = 4000             
_AC0 = 0             
_AC1 = 0             
_AC2 = 0             
_AC3 = 0             
_AC4 = 0             
_AC5 = 0             
_AC6 = 0             
_AC7 = 0             
_AC8 = 0             
_AC9 = 0             
_CRT = 381             
_HOT = 0             
_PSL - .  .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
    <EventID>89</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>86</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000020</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:53:04.290424200Z" />
    <EventRecordID>35276</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="68" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="ThermalZoneDeviceInstanceLength">21</Data>
    <Data Name="ThermalZoneDeviceInstance">ACPI\ThermalZone\THRM</Data>
    <Data Name="AffinityCount">1</Data>
    <Data Name="_PSV">378</Data>
    <Data Name="_TC1">2</Data>
    <Data Name="_TC2">3</Data>
    <Data Name="_TSP">4000</Data>
    <Data Name="_AC0">0</Data>
    <Data Name="_AC1">0</Data>
    <Data Name="_AC2">0</Data>
    <Data Name="_AC3">0</Data>
    <Data Name="_AC4">0</Data>
    <Data Name="_AC5">0</Data>
    <Data Name="_AC6">0</Data>
    <Data Name="_AC7">0</Data>
    <Data Name="_AC8">0</Data>
    <Data Name="_AC9">0</Data>
    <Data Name="_CRT">381</Data>
    <Data Name="_HOT">0</Data>
    <ComplexData Name="_PSL">0000000000000000</ComplexData>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-FilterManager
:          16.03.2014 0:52:58
 :   6
 :
:       
 :
:  
:     -
:
   "FileInfo" ( 6.1, ?2009?-?07?-?14T07:34:25.000000000Z)       .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-FilterManager" Guid="{F3C5E28E-63F6-49C7-A204-E48A1BC4B09D}" />
    <EventID>6</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:58.986414900Z" />
    <EventRecordID>35275</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="8" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="FinalStatus">0x0</Data>
    <Data Name="DeviceVersionMajor">6</Data>
    <Data Name="DeviceVersionMinor">1</Data>
    <Data Name="DeviceNameLength">8</Data>
    <Data Name="DeviceName">FileInfo</Data>
    <Data Name="DeviceTime">2009-07-14T07:34:25.000000000Z</Data>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-Kernel-General
:          16.03.2014 0:52:50
 :   12
 :
:       
 :
:  
:     -
:
    : ?2014?-?03?-?15T16:52:50.359599800Z.
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Kernel-General" Guid="{A68CA8B7-004F-D7B6-A698-07E2DE0F1F5D}" />
    <EventID>12</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:50.609200200Z" />
    <EventRecordID>35274</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="8" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="MajorVersion">6</Data>
    <Data Name="MinorVersion">1</Data>
    <Data Name="BuildVersion">7601</Data>
    <Data Name="QfeVersion">18247</Data>
    <Data Name="ServiceVersion">1</Data>
    <Data Name="BootMode">1</Data>
    <Data Name="StartTime">2014-03-15T16:52:50.359599800Z</Data>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-Kernel-General
:          16.03.2014 0:52:27
 :   13
 :
:       
 :
:  /
:     -
:
     : ?2014?-?03?-?15T16:52:27.409215600Z.
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Kernel-General" Guid="{A68CA8B7-004F-D7B6-A698-07E2DE0F1F5D}" />
    <EventID>13</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:27.409215600Z" />
    <EventRecordID>35273</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="2280" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="StopTime">2014-03-15T16:52:27.409215600Z</Data>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-Kernel-Power
:          16.03.2014 0:52:21
 :   109
 :(103)
:       
 :(4)
:  /
:     -
:
     .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
    <EventID>109</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>103</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000004</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:21.247204800Z" />
    <EventRecordID>35272</EventRecordID>
    <Correlation />
    <Execution ProcessID="396" ThreadID="400" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="ShutdownActionType">5</Data>
    <Data Name="ShutdownEventCode">0</Data>
    <Data Name="ShutdownReason">5</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:52:20
 :   7036
 :
:       
 :
:  /
:     -
:
 "Windows Search"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:20.904004200Z" />
    <EventRecordID>35271</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="964" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">Windows Search</Data>
    <Data Name="param2"></Data>
    <Binary>57005300650061007200630068002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:52:20
 :   7036
 :
:       
 :
:  /
:     -
:
 " PNRP"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:20.092802800Z" />
    <EventRecordID>35270</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="964" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> PNRP</Data>
    <Data Name="param2"></Data>
    <Binary>50004E00520050007300760063002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:52:20
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:20.061602700Z" />
    <EventRecordID>35269</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="964" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>7000320070007300760063002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:52:19
 :   7036
 :
:       
 :
:  /
:     -
:
 "   Windows"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:19.999202600Z" />
    <EventRecordID>35268</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="964" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   Windows</Data>
    <Data Name="param2"></Data>
    <Binary>46006F006E007400430061006300680065002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:52:19
 :   7036
 :
:       
 :
:  /
:     -
:
 "  Windows"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:19.702802100Z" />
    <EventRecordID>35267</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="964" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  Windows</Data>
    <Data Name="param2"></Data>
    <Binary>6500760065006E0074006C006F0067002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:52:19
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:19.702802100Z" />
    <EventRecordID>35266</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="964" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>430072007900700074005300760063002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:52:19
 :   7036
 :
:       
 :
:  /
:     -
:
 " Windows"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:19.640402000Z" />
    <EventRecordID>35265</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="964" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> Windows</Data>
    <Data Name="param2"></Data>
    <Binary>570069006E0044006500660065006E0064002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:52:19
 :   7036
 :
:       
 :
:  /
:     -
:
 "  WLAN"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:19.593601900Z" />
    <EventRecordID>35264</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="964" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  WLAN</Data>
    <Data Name="param2"></Data>
    <Binary>57006C0061006E007300760063002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-WLAN-AutoConfig
:          16.03.2014 0:52:19
 :   4001
 :
:       
 :
:  
:     -
:
     .

Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-WLAN-AutoConfig" Guid="{9580D7DD-0379-4658-9870-D5BE7D52D6DE}" />
    <EventID>4001</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>2</Opcode>
    <Keywords>0x4000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:19.593601900Z" />
    <EventRecordID>35263</EventRecordID>
    <Correlation />
    <Execution ProcessID="844" ThreadID="1092" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
  </EventData>
</Event>

 :   System
:      EventLog
:          16.03.2014 0:53:21
 :   6013
 :
:       
 :
:  /
:     -
:
   31 .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="EventLog" />
    <EventID Qualifiers="32768">6013</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:53:21.000000000Z" />
    <EventRecordID>35262</EventRecordID>
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>31</Data>
    <Data>60</Data>
    <Data>-480   ()</Data>
    <Binary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inary>
  </EventData>
</Event>

 :   System
:      EventLog
:          16.03.2014 0:53:21
 :   6005
 :
:       
 :
:  /
:     -
:
   .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="EventLog" />
    <EventID Qualifiers="32768">6005</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:53:21.000000000Z" />
    <EventRecordID>35261</EventRecordID>
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Binary>DE07030006000F00100035001500E4030000000001000000</Binary>
  </EventData>
</Event>

 :   System
:      EventLog
:          16.03.2014 0:53:21
 :   6009
 :
:       
 :
:  /
:     -
:
Microsoft (R) Windows (R) 6.01. 7601 Service Pack 1 Multiprocessor Free.
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="EventLog" />
    <EventID Qualifiers="32768">6009</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:53:21.000000000Z" />
    <EventRecordID>35260</EventRecordID>
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data>6.01.</Data>
    <Data>7601</Data>
    <Data>Service Pack 1</Data>
    <Data>Multiprocessor Free</Data>
    <Data>17514</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:52:19
 :   7036
 :
:       
 :
:  /
:     -
:
 "  PNP-"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:19.422001600Z" />
    <EventRecordID>35259</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="964" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  PNP-</Data>
    <Data Name="param2"></Data>
    <Binary>750070006E00700068006F00730074002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:52:19
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:19.328401500Z" />
    <EventRecordID>35258</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3852" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>7300700070007300760063002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:52:19
 :   7036
 :
:       
 :
:  /
:     -
:
 "  Windows"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:19.172401200Z" />
    <EventRecordID>35257</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3852" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  Windows</Data>
    <Data Name="param2"></Data>
    <Binary>570069006E006D0067006D0074002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:52:19
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:19.110001100Z" />
    <EventRecordID>35256</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3852" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>7700730063007300760063002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:52:18
 :   7036
 :
:       
 :
:  /
:     -
:
 "   Windows (WIA)"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:18.969600800Z" />
    <EventRecordID>35255</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3852" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   Windows (WIA)</Data>
    <Data Name="param2"></Data>
    <Binary>7300740069007300760063002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:52:18
 :   7036
 :
:       
 :
:  /
:     -
:
 "Superfetch"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:18.876000700Z" />
    <EventRecordID>35254</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3852" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">Superfetch</Data>
    <Data Name="param2"></Data>
    <Binary>5300790073004D00610069006E002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:52:18
 :   7036
 :
:       
 :
:  /
:     -
:
 " SSDP"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:18.860400600Z" />
    <EventRecordID>35253</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3852" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> SSDP</Data>
    <Data Name="param2"></Data>
    <Binary>53005300440050005300520056002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:52:18
 :   7036
 :
:       
 :
:  /
:     -
:
 "   "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:18.642000300Z" />
    <EventRecordID>35252</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3852" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   </Data>
    <Data Name="param2"></Data>
    <Binary>540072006B0057006B0073002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:52:18
 :   7036
 :
:       
 :
:  /
:     -
:
 "    (EAP)"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:18.548400100Z" />
    <EventRecordID>35251</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3852" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">    (EAP)</Data>
    <Data Name="param2"></Data>
    <Binary>45006100700048006F00730074002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:52:18
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:18.532800100Z" />
    <EventRecordID>35250</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="964" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>500072006F0066005300760063002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:52:18
 :   7036
 :
:       
 :
:  /
:     -
:
 "     "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:18.392399800Z" />
    <EventRecordID>35249</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3852" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">     </Data>
    <Data Name="param2"></Data>
    <Binary>5500780053006D0073002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:52:18
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:18.314399700Z" />
    <EventRecordID>35248</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3852" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:52:18
 :   7036
 :
:       
 :
:  /
:     -
:
 "   "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:18.251999600Z" />
    <EventRecordID>35247</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3852" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   </Data>
    <Data Name="param2"></Data>
    <Binary>460044005200650073005000750062002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:52:18
 :   7036
 :
:       
 :
:  /
:     -
:
 "Plug-and-Play"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:18.189599500Z" />
    <EventRecordID>35246</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3852" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">Plug-and-Play</Data>
    <Data Name="param2"></Data>
    <Binary>50006C007500670050006C00610079002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-UserPnp
:          16.03.2014 0:52:18
 :   20010
 :(7010)
:       
 :
:  
:     -
:
     (Plug and Play). 

   PlugPlay: "false" 
   PlugPlay: "false" 

Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-UserPnp" Guid="{96F4A050-7E31-453C-88BE-9634F4E02139}" />
    <EventID>20010</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>7010</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:18.189599500Z" />
    <EventRecordID>35245</EventRecordID>
    <Correlation />
    <Execution ProcessID="628" ThreadID="868" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <UserData>
    <INFO_PNP_STATE xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://manifests.microsoft.com/win/2004/08/windows/userpnp">
      <InstallSubsystemState>false</InstallSubsystemState>
      <CachingSubsystemState>false</CachingSubsystemState>
    </INFO_PNP_STATE>
  </UserData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:52:18
 :   7036
 :
:       
 :
:  /
:     -
:
 ""    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:18.111599300Z" />
    <EventRecordID>35244</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3852" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"></Data>
    <Data Name="param2"></Data>
    <Binary>50006F007700650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:52:18
 :   7036
 :
:       
 :
:  /
:     -
:
 "   "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:18.095999300Z" />
    <EventRecordID>35243</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3852" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   </Data>
    <Data Name="param2"></Data>
    <Binary>70003200700069006D007300760063002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:52:18
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:18.033599200Z" />
    <EventRecordID>35242</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3852" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>4400500053002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:52:18
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:18.033599200Z" />
    <EventRecordID>35241</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3852" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>570064006900530065007200760069006300650048006F00730074002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:52:18
 :   7036
 :
:       
 :
:  /
:     -
:
 "DHCP-"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:18.033599200Z" />
    <EventRecordID>35240</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="964" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">DHCP-</Data>
    <Data Name="param2"></Data>
    <Binary>44006800630070002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:52:18
 :   7036
 :
:       
 :
:  /
:     -
:
 "  HID-"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:18.002399100Z" />
    <EventRecordID>35239</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="964" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  HID-</Data>
    <Data Name="param2"></Data>
    <Binary>68006900640073006500720076002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-Dhcp-Client
:          16.03.2014 0:52:17
 :   50037
 :  
:       
 :
:  LOCAL SERVICE
:     -
:
   DHCPv4.    : 1
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Dhcp-Client" Guid="{15A7A4F8-0072-4EAB-ABAD-F98A4D666AED}" />
    <EventID>50037</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>4</Task>
    <Opcode>69</Opcode>
    <Keywords>0x2000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:17.955599000Z" />
    <EventRecordID>35238</EventRecordID>
    <Correlation />
    <Execution ProcessID="780" ThreadID="720" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData>
    <Data Name="DwordVal">1</Data>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-DHCPv6-Client
:          16.03.2014 0:52:17
 :   51047
 :  
:       
 :
:  LOCAL SERVICE
:     -
:
  DHCPv6 .    : 1
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-DHCPv6-Client" Guid="{6A1F2B00-6A90-4C38-95A5-5CAB3B056778}" />
    <EventID>51047</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>4</Task>
    <Opcode>63</Opcode>
    <Keywords>0x2000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:17.955599000Z" />
    <EventRecordID>35237</EventRecordID>
    <Correlation />
    <Execution ProcessID="780" ThreadID="1040" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData>
    <Data Name="DwordVal">1</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:52:17
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:17.705998600Z" />
    <EventRecordID>35236</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="964" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>670070007300760063002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:52:17
 :   7036
 :
:       
 :
:  /
:     -
:
 "  Windows"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:17.581198400Z" />
    <EventRecordID>35235</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="348" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  Windows</Data>
    <Data Name="param2"></Data>
    <Binary>770075006100750073006500720076002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-WindowsUpdateClient
:          16.03.2014 0:52:17
 :   27
 :   Windows
:       
 :
:  
:     -
:
  .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-WindowsUpdateClient" Guid="{945A8954-C147-4ACD-923F-40C45405A658}" />
    <EventID>27</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>1</Task>
    <Opcode>16</Opcode>
    <Keywords>0x8000000000000080</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:17.487598200Z" />
    <EventRecordID>35234</EventRecordID>
    <Correlation />
    <Execution ProcessID="916" ThreadID="1576" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
  </EventData>
</Event>

 :   System
:      EventLog
:          16.03.2014 0:52:18
 :   6006
 :
:       
 :
:  /
:     -
:
   .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="EventLog" />
    <EventID Qualifiers="32768">6006</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:18.000000000Z" />
    <EventRecordID>35233</EventRecordID>
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Binary>0100000026030000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-Winlogon
:          16.03.2014 0:52:17
 :   7002
 :(1102)
:       
 :
:  
:     -
:
        
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Winlogon" Guid="{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}" />
    <EventID>7002</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>1102</Task>
    <Opcode>0</Opcode>
    <Keywords>0x2000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:17.175597700Z" />
    <EventRecordID>35232</EventRecordID>
    <Correlation />
    <Execution ProcessID="3052" ThreadID="4720" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="TSId">2</Data>
    <Data Name="UserSid">S-1-5-21-3368229806-3106785895-14530972-1003</Data>
  </EventData>
</Event>

 :   System
:      USER32
:          16.03.2014 0:52:17
 :   1074
 :
:       
 :
:  -\User
:     -
:
 C:\Windows\system32\winlogon.exe (-)   ""   -    -\User  :   
  : 0x500ff
  : 
 : 
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="USER32" />
    <EventID Qualifiers="32768">1074</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:17.000000000Z" />
    <EventRecordID>35231</EventRecordID>
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-21-3368229806-3106785895-14530972-1003" />
  </System>
  <EventData>
    <Data>C:\Windows\system32\winlogon.exe (-)</Data>
    <Data>-</Data>
    <Data>  </Data>
    <Data>0x500ff</Data>
    <Data></Data>
    <Data>
    </Data>
    <Data>-\User</Data>
    <Binary>FF000500000000000000000000000000000000000000000000000000000000000000000000000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:52:14
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:14.292392400Z" />
    <EventRecordID>35230</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="348" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>4D004D004300530053002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:52:14
 :   7036
 :
:       
 :
:  /
:     -
:
 "   "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:14.276792400Z" />
    <EventRecordID>35229</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="4816" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   </Data>
    <Data Name="param2"></Data>
    <Binary>410065004C006F006F006B00750070005300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      USER32
:          16.03.2014 0:52:13
 :   1074
 :
:       
 :
:  -\User
:     -
:
 Explorer.EXE   ""   -    -\User  :  ()
  : 0x0
  : 
 : 
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="USER32" />
    <EventID Qualifiers="32768">1074</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:13.000000000Z" />
    <EventRecordID>35228</EventRecordID>
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-21-3368229806-3106785895-14530972-1003" />
  </System>
  <EventData>
    <Data>Explorer.EXE</Data>
    <Data>-</Data>
    <Data> ()</Data>
    <Data>0x0</Data>
    <Data></Data>
    <Data>
    </Data>
    <Data>-\User</Data>
    <Binary>00000000000000000000000000000000000000000000000000000000000000000000000000000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:52:12
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:52:12.272367700Z" />
    <EventRecordID>35227</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3852" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:48:59
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:48:59.331228800Z" />
    <EventRecordID>35226</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="348" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>7300700070007300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:48:32
 :   7036
 :
:       
 :
:  /
:     -
:
 "   "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:48:32.476681300Z" />
    <EventRecordID>35225</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="2032" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   </Data>
    <Data Name="param2"></Data>
    <Binary>410065004C006F006F006B00750070005300760063002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:47:40
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:47:40.154189400Z" />
    <EventRecordID>35224</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="2032" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>7300700070007300760063002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:47:35
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:47:35.115980400Z" />
    <EventRecordID>35223</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="2032" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>4D004D004300530053002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:47:18
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:47:18.314750900Z" />
    <EventRecordID>35222</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="2032" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:47:12
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:47:12.277540300Z" />
    <EventRecordID>35221</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="4672" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:46:23
 :   7036
 :
:       
 :
:  /
:     -
:
 "  Windows"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:46:23.060053600Z" />
    <EventRecordID>35220</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="1408" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  Windows</Data>
    <Data Name="param2"></Data>
    <Binary>540072007500730074006500640049006E007300740061006C006C00650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:46:22
 :   7040
 :
:       
 :
:  
:     -
:
   "  Windows"    ""  "".
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7040</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:46:22.202052100Z" />
    <EventRecordID>35219</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="1408" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="param1">  Windows</Data>
    <Data Name="param2"></Data>
    <Data Name="param3"></Data>
    <Data Name="param4">TrustedInstaller</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:46:17
 :   7040
 :
:       
 :
:  
:     -
:
   "  Windows"    ""  "".
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7040</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:46:17.709244200Z" />
    <EventRecordID>35218</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="1408" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="param1">  Windows</Data>
    <Data Name="param2"></Data>
    <Data Name="param3"></Data>
    <Data Name="param4">TrustedInstaller</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:45:12
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:45:12.320129000Z" />
    <EventRecordID>35217</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="1408" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:45:06
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:45:06.282918400Z" />
    <EventRecordID>35216</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="4672" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:42:36
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:42:36.624140500Z" />
    <EventRecordID>35215</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="1408" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>7300700070007300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:40:54
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:40:54.287078800Z" />
    <EventRecordID>35214</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="1408" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:40:48
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:40:48.282851800Z" />
    <EventRecordID>35213</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="1408" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:40:45
 :   7036
 :
:       
 :
:  /
:     -
:
 "    (Microsoft)"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:40:45.662047200Z" />
    <EventRecordID>35212</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="4064" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">    (Microsoft)</Data>
    <Data Name="param2"></Data>
    <Binary>730077007000720076002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:40:12
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:40:12.309188600Z" />
    <EventRecordID>35211</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="1408" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:40:06
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:40:06.271978000Z" />
    <EventRecordID>35210</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="4128" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:38:36
 :   7045
 :
:       
 :
:  -\User
:     -
:
   .

 :  FinalWire AIDA64 Kernel Driver
  :  D:\\AIDA64 Extreme Edition\kerneld.x64
 :    
  :  
  :  
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7045</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:38:36.939345100Z" />
    <EventRecordID>35209</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="4124" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-21-3368229806-3106785895-14530972-1003" />
  </System>
  <EventData>
    <Data Name="ServiceName">FinalWire AIDA64 Kernel Driver</Data>
    <Data Name="ImagePath">D:\\AIDA64 Extreme Edition\kerneld.x64</Data>
    <Data Name="ServiceType">  </Data>
    <Data Name="StartType"></Data>
    <Data Name="AccountName">
    </Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:38:04
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:38:04.304887300Z" />
    <EventRecordID>35208</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="4128" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:37:58
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:37:58.267676700Z" />
    <EventRecordID>35207</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="4128" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:37:45
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:37:45.647254500Z" />
    <EventRecordID>35206</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="4128" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>5600530053002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-WindowsUpdateClient
:          16.03.2014 0:36:18
 :   19
 :   Windows
:       
 : ,
:  
:     -
:
 :     :   Windows 7     64- (x64)  (KB2923545)
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-WindowsUpdateClient" Guid="{945A8954-C147-4ACD-923F-40C45405A658}" />
    <EventID>19</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>1</Task>
    <Opcode>13</Opcode>
    <Keywords>0x8000000000000018</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:36:18.432271300Z" />
    <EventRecordID>35205</EventRecordID>
    <Correlation />
    <Execution ProcessID="916" ThreadID="4180" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="updateTitle">  Windows 7     64- (x64)  (KB2923545)</Data>
    <Data Name="updateGuid">{A2F0137A-386D-44E3-8488-F468A24849A7}</Data>
    <Data Name="updateRevisionNumber">200</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:34:43
 :   7040
 :
:       
 :
:  
:     -
:
   "  Windows"    ""  "".
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7040</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:34:43.936594800Z" />
    <EventRecordID>35204</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="816" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="param1">  Windows</Data>
    <Data Name="param2"></Data>
    <Data Name="param3"></Data>
    <Data Name="param4">TrustedInstaller</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:34:29
 :   7040
 :
:       
 :
:  
:     -
:
   "  Windows"    ""  "".
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7040</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:34:29.591774300Z" />
    <EventRecordID>35203</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="2152" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="param1">  Windows</Data>
    <Data Name="param2"></Data>
    <Data Name="param3"></Data>
    <Data Name="param4">TrustedInstaller</Data>
  </EventData>
</Event>

 :   System
:      volsnap
:          16.03.2014 0:34:28
 :   33
 :
:       
 :
:  /
:     -
:
     C:      ,     C:,  ,  .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="volsnap" />
    <EventID Qualifiers="16390">33</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:34:28.266698500Z" />
    <EventRecordID>35202</EventRecordID>
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data>\Device\HarddiskVolumeShadowCopy1</Data>
    <Data>C:</Data>
    <Binary>00000000020030000000000021000640020000000000000000000000000000000000000000000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-WindowsUpdateClient
:          16.03.2014 0:34:09
 :   18
 : 
:       
 : ,
:  
:     -
:
   :       .       ?16 ? ?2014 ?.  15:00: 
-   Windows 7     64- (x64)  (KB2923545)
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-WindowsUpdateClient" Guid="{945A8954-C147-4ACD-923F-40C45405A658}" />
    <EventID>18</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>2</Task>
    <Opcode>12</Opcode>
    <Keywords>0x8000000000000014</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:34:09.940650300Z" />
    <EventRecordID>35201</EventRecordID>
    <Correlation />
    <Execution ProcessID="916" ThreadID="4180" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="schedinstalldate">?16 ? ?2014 ?.</Data>
    <Data Name="schedinstalltime">15:00</Data>
    <Data Name="updatelist">
-   Windows 7     64- (x64)  (KB2923545)</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:34:06
 :   7036
 :
:       
 :
:  /
:     -
:
 "    (Microsoft)"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:34:06.725466400Z" />
    <EventRecordID>35200</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="816" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">    (Microsoft)</Data>
    <Data Name="param2"></Data>
    <Binary>730077007000720076002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:34:06
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:34:06.428449500Z" />
    <EventRecordID>35199</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="2152" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>5600530053002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:33:08
 :   7040
 :
:       
 :
:  
:     -
:
   "  Windows"    ""  "".
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7040</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:33:08.945161600Z" />
    <EventRecordID>35198</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3008" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="param1">  Windows</Data>
    <Data Name="param2"></Data>
    <Data Name="param3"></Data>
    <Data Name="param4">TrustedInstaller</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:33:04
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:33:04.293895600Z" />
    <EventRecordID>35197</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3008" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:33:00
 :   7040
 :
:       
 :
:  
:     -
:
   "  Windows"    ""  "".
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7040</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:33:00.447675600Z" />
    <EventRecordID>35196</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3008" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="param1">  Windows</Data>
    <Data Name="param2"></Data>
    <Data Name="param3"></Data>
    <Data Name="param4">TrustedInstaller</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:32:58
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:32:58.272551200Z" />
    <EventRecordID>35195</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3008" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:32:48
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:32:48.298980700Z" />
    <EventRecordID>35194</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="2152" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:32:42
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:32:42.273636100Z" />
    <EventRecordID>35193</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="2152" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:32:40
 :   7036
 :
:       
 :
:  /
:     -
:
 "   - WinHTTP"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:32:40.770550100Z" />
    <EventRecordID>35192</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="2152" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   - WinHTTP</Data>
    <Data Name="param2"></Data>
    <Binary>570069006E0048007400740070004100750074006F00500072006F00780079005300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:32:17
 :   7036
 :
:       
 :
:  /
:     -
:
 "  Windows"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:32:17.395213100Z" />
    <EventRecordID>35191</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3388" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  Windows</Data>
    <Data Name="param2"></Data>
    <Binary>540072007500730074006500640049006E007300740061006C006C00650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:31:28
 :   7036
 :
:       
 :
:  /
:     -
:
 "   "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:31:28.301877100Z" />
    <EventRecordID>35190</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3008" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   </Data>
    <Data Name="param2"></Data>
    <Binary>410065004C006F006F006B00750070005300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:30:58
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:30:58.319636900Z" />
    <EventRecordID>35189</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="2152" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:30:52
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:30:52.282426300Z" />
    <EventRecordID>35188</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3008" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-Winlogon
:          16.03.2014 0:30:43
 :   7001
 :(1101)
:       
 :
:  
:     -
:
        
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Winlogon" Guid="{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}" />
    <EventID>7001</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>1101</Task>
    <Opcode>0</Opcode>
    <Keywords>0x2000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:30:43.980411500Z" />
    <EventRecordID>35187</EventRecordID>
    <Correlation />
    <Execution ProcessID="3052" ThreadID="4396" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="TSId">2</Data>
    <Data Name="UserSid">S-1-5-21-3368229806-3106785895-14530972-1003</Data>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-Winlogon
:          16.03.2014 0:30:39
 :   7002
 :(1102)
:       
 :
:  
:     -
:
        
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Winlogon" Guid="{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}" />
    <EventID>7002</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>1102</Task>
    <Opcode>0</Opcode>
    <Keywords>0x2000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:30:39.721604000Z" />
    <EventRecordID>35186</EventRecordID>
    <Correlation />
    <Execution ProcessID="460" ThreadID="2652" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="TSId">1</Data>
    <Data Name="UserSid">S-1-5-21-3368229806-3106785895-14530972-1000</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:30:36
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:30:36.655998400Z" />
    <EventRecordID>35185</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="560" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>4D004D004300530053002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:27:46
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:27:46.298604200Z" />
    <EventRecordID>35184</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="4144" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:27:40
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:27:40.274259600Z" />
    <EventRecordID>35183</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="4144" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:26:28
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:26:28.296142700Z" />
    <EventRecordID>35182</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="4144" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:26:22
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:26:22.272798200Z" />
    <EventRecordID>35181</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="4144" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:25:58
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:25:58.295426700Z" />
    <EventRecordID>35180</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="4144" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:25:52
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:25:52.272082200Z" />
    <EventRecordID>35179</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3048" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:23:50
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:23:50.297105700Z" />
    <EventRecordID>35178</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="4144" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:23:44
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:23:44.272761100Z" />
    <EventRecordID>35177</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="4144" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:21:18
 :   7036
 :
:       
 :
:  /
:     -
:
 "   "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:21:18.273410400Z" />
    <EventRecordID>35176</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="4048" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   </Data>
    <Data Name="param2"></Data>
    <Binary>410065004C006F006F006B00750070005300760063002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:18:50
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:18:50.295946600Z" />
    <EventRecordID>35175</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="2080" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:18:44
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:18:44.271602000Z" />
    <EventRecordID>35174</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="4048" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:17:12
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:17:12.298341400Z" />
    <EventRecordID>35173</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="2080" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:17:06
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:17:06.272996800Z" />
    <EventRecordID>35172</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="4048" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:16:44
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:16:44.296739800Z" />
    <EventRecordID>35171</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="4048" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:16:38
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:16:38.272395300Z" />
    <EventRecordID>35170</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3248" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:15:17
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:15:17.092752000Z" />
    <EventRecordID>35169</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3184" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>4D004D004300530053002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:11:44
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:11:44.292580600Z" />
    <EventRecordID>35168</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3204" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:11:38
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:11:38.272236200Z" />
    <EventRecordID>35167</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="4476" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-DNS-Client
:          16.03.2014 0:11:22
 :   1014
 :
:       
 :
:  NETWORK SERVICE
:     -
:
    www.catedratico.ru        DNS.
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-DNS-Client" Guid="{1C95126E-7EEA-49A9-A3FE-A378B03DDB4D}" />
    <EventID>1014</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x4000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:11:22.456331600Z" />
    <EventRecordID>35166</EventRecordID>
    <Correlation />
    <Execution ProcessID="788" ThreadID="2988" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-20" />
  </System>
  <EventData>
    <Data Name="QueryName">www.catedratico.ru</Data>
    <Data Name="AddressLength">16</Data>
    <Data Name="Address">02000035C0A800010000000000000000</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:11:18
 :   7036
 :
:       
 :
:  /
:     -
:
 "   "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:11:18.272092300Z" />
    <EventRecordID>35165</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3204" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   </Data>
    <Data Name="param2"></Data>
    <Binary>410065004C006F006F006B00750070005300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:11:16
 :   7036
 :
:       
 :
:  /
:     -
:
 "   "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:11:16.547993700Z" />
    <EventRecordID>35164</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3204" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   </Data>
    <Data Name="param2"></Data>
    <Binary>410065004C006F006F006B00750070005300760063002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:09:36
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:09:36.318025900Z" />
    <EventRecordID>35163</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3204" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:09:30
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:09:30.280815300Z" />
    <EventRecordID>35162</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="2776" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:07:10
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:07:10.298681000Z" />
    <EventRecordID>35161</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3204" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:07:04
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:07:04.273336300Z" />
    <EventRecordID>35160</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3204" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:06:26
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:06:26.669185500Z" />
    <EventRecordID>35159</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3204" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>4D004D004300530053002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:04:36
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:04:36.297872600Z" />
    <EventRecordID>35158</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="2836" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:04:30
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:04:30.272528000Z" />
    <EventRecordID>35157</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="2220" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:02:30
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:02:30.299665900Z" />
    <EventRecordID>35156</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="2608" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:02:24
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:02:24.273321200Z" />
    <EventRecordID>35155</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="2608" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:01:16
 :   7036
 :
:       
 :
:  /
:     -
:
 "   "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:01:16.270431700Z" />
    <EventRecordID>35154</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="2608" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   </Data>
    <Data Name="param2"></Data>
    <Binary>410065004C006F006F006B00750070005300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          16.03.2014 0:00:27
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T16:00:27.324949800Z" />
    <EventRecordID>35153</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="2608" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>4D004D004300530053002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:57:30
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:57:30.294824300Z" />
    <EventRecordID>35152</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="2980" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:57:24
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:57:24.272479800Z" />
    <EventRecordID>35151</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="2980" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:57:08
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:57:08.296566000Z" />
    <EventRecordID>35150</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3576" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:57:02
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:57:02.273221500Z" />
    <EventRecordID>35149</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3304" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:55:44
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:55:44.291761200Z" />
    <EventRecordID>35148</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3576" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:55:38
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:55:38.272416900Z" />
    <EventRecordID>35147</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="2980" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:55:28
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:55:28.291846100Z" />
    <EventRecordID>35146</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3576" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:55:26
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:55:26.371736300Z" />
    <EventRecordID>35145</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="2980" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>4D004D004300530053002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:55:22
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:55:22.273501900Z" />
    <EventRecordID>35144</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3512" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:55:21
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:55:21.149437600Z" />
    <EventRecordID>35143</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="2980" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-Power-Troubleshooter
:          15.03.2014 23:55:21
 :   1
 :
:       
 :
:  LOCAL SERVICE
:     -
:
    .

    : ?2014?-?03?-?15T15:41:38.541264700Z
    : ?2014?-?03?-?15T15:55:15.588119500Z

 :  
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Power-Troubleshooter" Guid="{CDC05E28-C449-49C6-B9D2-88CF761644DF}" />
    <EventID>1</EventID>
    <Version>1</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:55:21.130436500Z" />
    <EventRecordID>35142</EventRecordID>
    <Correlation ActivityID="{1E5C544D-A041-48E3-BCEB-F277AFBF8462}" />
    <Execution ProcessID="1164" ThreadID="592" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData>
    <Data Name="SleepTime">2014-03-15T15:41:38.541264700Z</Data>
    <Data Name="WakeTime">2014-03-15T15:55:15.588119500Z</Data>
    <Data Name="SleepDuration">7804</Data>
    <Data Name="WakeDuration">2086</Data>
    <Data Name="DriverInitDuration">1465</Data>
    <Data Name="BiosInitDuration">0</Data>
    <Data Name="HiberWriteDuration">12801</Data>
    <Data Name="HiberReadDuration">9361</Data>
    <Data Name="HiberPagesWritten">132855</Data>
    <Data Name="Attributes">16517</Data>
    <Data Name="TargetState">5</Data>
    <Data Name="EffectiveState">5</Data>
    <Data Name="WakeSourceType">0</Data>
    <Data Name="WakeSourceTextLength">0</Data>
    <Data Name="WakeSourceText">
    </Data>
    <Data Name="WakeTimerOwnerLength">0</Data>
    <Data Name="WakeTimerContextLength">0</Data>
    <Data Name="WakeTimerOwner">
    </Data>
    <Data Name="WakeTimerContext">
    </Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:55:18
 :   7036
 :
:       
 :
:  /
:     -
:
 "   Windows (WIA)"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:55:18.305274900Z" />
    <EventRecordID>35141</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3576" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   Windows (WIA)</Data>
    <Data Name="param2"></Data>
    <Binary>7300740069007300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:55:18
 :   7036
 :
:       
 :
:  /
:     -
:
 "  NetBIOS  TCP/IP"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:55:18.273273100Z" />
    <EventRecordID>35140</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3576" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  NetBIOS  TCP/IP</Data>
    <Data Name="param2"></Data>
    <Binary>6C006D0068006F007300740073002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:55:17
 :   7036
 :
:       
 :
:  /
:     -
:
 "  NetBIOS  TCP/IP"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:55:17.732242100Z" />
    <EventRecordID>35139</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3576" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  NetBIOS  TCP/IP</Data>
    <Data Name="param2"></Data>
    <Binary>6C006D0068006F007300740073002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-DNS-Client
:          15.03.2014 23:55:17
 :   1014
 :
:       
 :
:  NETWORK SERVICE
:     -
:
    wpad.Dlink        DNS.
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-DNS-Client" Guid="{1C95126E-7EEA-49A9-A3FE-A378B03DDB4D}" />
    <EventID>1014</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x4000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:55:17.524230200Z" />
    <EventRecordID>35138</EventRecordID>
    <Correlation />
    <Execution ProcessID="788" ThreadID="2988" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-20" />
  </System>
  <EventData>
    <Data Name="QueryName">wpad.Dlink</Data>
    <Data Name="AddressLength">16</Data>
    <Data Name="Address">02000035C0A800010000000000000000</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:55:17
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:55:17.408223600Z" />
    <EventRecordID>35137</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3576" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>570064006900530079007300740065006D0048006F00730074002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:55:16
 :   7036
 :
:       
 :
:  /
:     -
:
 "   "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:55:16.172152900Z" />
    <EventRecordID>35136</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3576" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   </Data>
    <Data Name="param2"></Data>
    <Binary>410065004C006F006F006B00750070005300760063002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:55:15
 :   7042
 :
:       
 :
:  
:     -
:
   NetBIOS  TCP/IP     .

  : 0x40030011 [ :   ()]

 : 
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7042</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:55:15.395108400Z" />
    <EventRecordID>35135</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3576" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="param1">  NetBIOS  TCP/IP</Data>
    <Data Name="param2"></Data>
    <Data Name="param3">0x40030011</Data>
    <Data Name="param4"> :   ()</Data>
    <Data Name="param5"></Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:55:13
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:55:13.790016600Z" />
    <EventRecordID>35134</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="2980" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>4D004D004300530053002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:55:13
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:55:13.571004100Z" />
    <EventRecordID>35133</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3512" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-Kernel-General
:          15.03.2014 23:55:13
 :   1
 :
:       
 :
:  /
:     -
:
    ?2014?-?03?-?15T15:41:46.938745000Z  ?2014?-?03?-?15T15:55:13.500000000Z.
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Kernel-General" Guid="{A68CA8B7-004F-D7B6-A698-07E2DE0F1F5D}" />
    <EventID>1</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000010</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:55:13.502000200Z" />
    <EventRecordID>35132</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="44" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="NewTime">2014-03-15T15:55:13.500000000Z</Data>
    <Data Name="OldTime">2014-03-15T15:41:46.938745000Z</Data>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-Kernel-Power
:          15.03.2014 23:41:43
 :   42
 :(64)
:       
 :(4)
:  /
:     -
:
    .

    : 
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
    <EventID>42</EventID>
    <Version>2</Version>
    <Level>4</Level>
    <Task>64</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000004</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:41:43.365540700Z" />
    <EventRecordID>35131</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="44" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="TargetState">5</Data>
    <Data Name="EffectiveState">5</Data>
    <Data Name="Reason">2</Data>
    <Data Name="Flags">0</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:41:40
 :   7036
 :
:       
 :
:  /
:     -
:
 "   Windows (WIA)"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:41:40.840396200Z" />
    <EventRecordID>35130</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="4068" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   Windows (WIA)</Data>
    <Data Name="param2"></Data>
    <Binary>7300740069007300760063002F0037000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:41:21
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:41:21.332756700Z" />
    <EventRecordID>35129</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="2980" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:41:15
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:41:15.298411500Z" />
    <EventRecordID>35128</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="2980" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:39:38
 :   7036
 :
:       
 :
:  /
:     -
:
 "   - WinHTTP"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:39:38.320731300Z" />
    <EventRecordID>35127</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3496" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   - WinHTTP</Data>
    <Data Name="param2"></Data>
    <Binary>570069006E0048007400740070004100750074006F00500072006F00780079005300760063002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:36:21
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:36:21.305890400Z" />
    <EventRecordID>35126</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="1700" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:36:15
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:36:15.278545600Z" />
    <EventRecordID>35125</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3496" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:36:08
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:36:08.772173500Z" />
    <EventRecordID>35124</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3496" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>4D004D004300530053002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:34:13
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:34:13.297568700Z" />
    <EventRecordID>35123</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3496" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:34:07
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:34:07.272224100Z" />
    <EventRecordID>35122</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3496" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:34:02
 :   7036
 :
:       
 :
:  /
:     -
:
 " Windows"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:34:02.737964700Z" />
    <EventRecordID>35121</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="4056" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> Windows</Data>
    <Data Name="param2"></Data>
    <Binary>6D00730069007300650072007600650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:29:13
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:29:13.309712500Z" />
    <EventRecordID>35120</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3864" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:29:07
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:29:07.272501900Z" />
    <EventRecordID>35119</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3088" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:28:13
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:28:13.990299700Z" />
    <EventRecordID>35118</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3864" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>4D004D004300530053002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:27:05
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:27:05.311922500Z" />
    <EventRecordID>35117</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3288" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:26:59
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:26:59.274711900Z" />
    <EventRecordID>35116</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3088" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:24:37
 :   7036
 :
:       
 :
:  /
:     -
:
 " Google Update (gupdate)"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:24:37.199500500Z" />
    <EventRecordID>35115</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="268" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> Google Update (gupdate)</Data>
    <Data Name="param2"></Data>
    <Binary>67007500700064006100740065002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:24:07
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:24:07.310790900Z" />
    <EventRecordID>35114</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3800" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:24:01
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:24:01.281247800Z" />
    <EventRecordID>35113</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="268" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:24:00
 :   7036
 :
:       
 :
:  /
:     -
:
 " Windows"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:24:00.707215000Z" />
    <EventRecordID>35112</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="268" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> Windows</Data>
    <Data Name="param2"></Data>
    <Binary>6D00730069007300650072007600650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:22:05
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:22:05.315059000Z" />
    <EventRecordID>35111</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3200" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:21:59
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:21:59.277848400Z" />
    <EventRecordID>35110</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="3200" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-Application-Experience
:          15.03.2014 23:21:03
 :   206
 :
:       
 :
:  
:     -
:
         .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Application-Experience" Guid="{EEF54E71-0661-422D-9A98-82FD4940B820}" />
    <EventID>206</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:21:03.757350800Z" />
    <EventRecordID>35109</EventRecordID>
    <Correlation />
    <Execution ProcessID="844" ThreadID="336" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:20:59
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:20:59.311343000Z" />
    <EventRecordID>35108</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="268" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:20:53
 :   7036
 :
:       
 :
:  /
:     -
:
 " Google Update (gupdate)"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:20:53.742133200Z" />
    <EventRecordID>35107</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="1652" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> Google Update (gupdate)</Data>
    <Data Name="param2"></Data>
    <Binary>67007500700064006100740065002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:20:53
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:20:53.274132400Z" />
    <EventRecordID>35106</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="1652" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:20:30
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:20:30.279692000Z" />
    <EventRecordID>35105</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="1652" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>7300700070007300760063002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:19:59
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:19:59.329237700Z" />
    <EventRecordID>35104</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="268" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:19:55
 :   7040
 :
:       
 :
:  
:     -
:
   "    (BITS)"    ""  "".
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7040</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:19:55.897231600Z" />
    <EventRecordID>35103</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="1652" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="param1">    (BITS)</Data>
    <Data Name="param2"></Data>
    <Data Name="param3"></Data>
    <Data Name="param4">BITS</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:19:55
 :   7036
 :
:       
 :
:  /
:     -
:
 "    (BITS)"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:19:55.242030500Z" />
    <EventRecordID>35102</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="268" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">    (BITS)</Data>
    <Data Name="param2"></Data>
    <Binary>42004900540053002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:19:53
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:19:53.276427000Z" />
    <EventRecordID>35101</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="268" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:19:44
 :   7045
 :
:       
 :
:  -\
:     -
:
   .

 :   Google Update (gupdatem)
  :  "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc
 :    
  :  
  :  LocalSystem
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7045</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:19:44.821212200Z" />
    <EventRecordID>35100</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="980" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-21-3368229806-3106785895-14530972-1000" />
  </System>
  <EventData>
    <Data Name="ServiceName"> Google Update (gupdatem)</Data>
    <Data Name="ImagePath">"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc</Data>
    <Data Name="ServiceType">  </Data>
    <Data Name="StartType"></Data>
    <Data Name="AccountName">LocalSystem</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:19:27
 :   7045
 :
:       
 :
:  -\
:     -
:
   .

 :   Google Update (gupdate)
  :  "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc
 :    
  :  
  :  LocalSystem
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7045</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:19:27.801582300Z" />
    <EventRecordID>35099</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="980" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-21-3368229806-3106785895-14530972-1000" />
  </System>
  <EventData>
    <Data Name="ServiceName"> Google Update (gupdate)</Data>
    <Data Name="ImagePath">"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc</Data>
    <Data Name="ServiceType">  </Data>
    <Data Name="StartType"></Data>
    <Data Name="AccountName">LocalSystem</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:19:17
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:19:17.795564300Z" />
    <EventRecordID>35098</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="980" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>4D004D004300530053002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:19:16
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:19:16.360361800Z" />
    <EventRecordID>35097</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="1652" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>41007000700069006E0066006F002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:19:03
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:19:03.318738900Z" />
    <EventRecordID>35096</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="980" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:18:57
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:18:57.281528300Z" />
    <EventRecordID>35095</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="980" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:17:52
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:17:52.541414600Z" />
    <EventRecordID>35094</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="1364" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>4D004D004300530053002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:15:43
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:15:43.310787600Z" />
    <EventRecordID>35093</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="1436" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:15:37
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:15:37.273577000Z" />
    <EventRecordID>35092</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="592" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:14:59
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:14:59.318710400Z" />
    <EventRecordID>35091</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="1436" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:14:53
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:14:53.281499700Z" />
    <EventRecordID>35090</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="1364" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:14:46
 :   7036
 :
:       
 :
:  /
:     -
:
 "   "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:14:46.667088100Z" />
    <EventRecordID>35089</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="592" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   </Data>
    <Data Name="param2"></Data>
    <Binary>57005000440042007500730045006E0075006D002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:14:41
 :   7036
 :
:       
 :
:  /
:     -
:
 "  Windows"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:14:41.534679100Z" />
    <EventRecordID>35088</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="596" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  Windows</Data>
    <Data Name="param2"></Data>
    <Binary>770075006100750073006500720076002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:14:39
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:14:39.101074800Z" />
    <EventRecordID>35087</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="596" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>7700730063007300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:14:38
 :   7036
 :
:       
 :
:  /
:     -
:
 " Windows"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:14:38.664274100Z" />
    <EventRecordID>35086</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="596" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> Windows</Data>
    <Data Name="param2"></Data>
    <Binary>570069006E0044006500660065006E0064002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:14:38
 :   7036
 :
:       
 :
:  /
:     -
:
 "Microsoft .NET Framework NGEN v4.0.30319_X64"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:14:38.258673400Z" />
    <EventRecordID>35085</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="596" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">Microsoft .NET Framework NGEN v4.0.30319_X64</Data>
    <Data Name="param2"></Data>
    <Binary>63006C0072005F006F007000740069006D0069007A006100740069006F006E005F00760034002E0030002E00330030003300310039005F00360034002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:14:38
 :   7036
 :
:       
 :
:  /
:     -
:
 "Microsoft .NET Framework NGEN v4.0.30319_X64"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:14:38.258673400Z" />
    <EventRecordID>35084</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="596" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">Microsoft .NET Framework NGEN v4.0.30319_X64</Data>
    <Data Name="param2"></Data>
    <Binary>63006C0072005F006F007000740069006D0069007A006100740069006F006E005F00760034002E0030002E00330030003300310039005F00360034002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:14:38
 :   7036
 :
:       
 :
:  /
:     -
:
 "Microsoft .NET Framework NGEN v4.0.30319_X86"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:14:38.071473000Z" />
    <EventRecordID>35083</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="596" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">Microsoft .NET Framework NGEN v4.0.30319_X86</Data>
    <Data Name="param2"></Data>
    <Binary>63006C0072005F006F007000740069006D0069007A006100740069006F006E005F00760034002E0030002E00330030003300310039005F00330032002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:14:38
 :   7036
 :
:       
 :
:  /
:     -
:
 "Microsoft .NET Framework NGEN v4.0.30319_X86"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:14:38.071473000Z" />
    <EventRecordID>35082</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="596" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">Microsoft .NET Framework NGEN v4.0.30319_X86</Data>
    <Data Name="param2"></Data>
    <Binary>63006C0072005F006F007000740069006D0069007A006100740069006F006E005F00760034002E0030002E00330030003300310039005F00330032002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:13:49
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:13:49.321387400Z" />
    <EventRecordID>35081</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="592" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:13:43
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:13:43.268576800Z" />
    <EventRecordID>35080</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="624" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:13:37
 :   7036
 :
:       
 :
:  /
:     -
:
 "Windows Search"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:13:37.153366000Z" />
    <EventRecordID>35079</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="620" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">Windows Search</Data>
    <Data Name="param2"></Data>
    <Binary>57005300650061007200630068002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:13:30
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:13:30.445354300Z" />
    <EventRecordID>35078</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="620" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>7000320070007300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:13:30
 :   7036
 :
:       
 :
:  /
:     -
:
 " PNRP"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:13:30.336154100Z" />
    <EventRecordID>35077</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="592" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> PNRP</Data>
    <Data Name="param2"></Data>
    <Binary>50004E00520050007300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:13:29
 :   7036
 :
:       
 :
:  /
:     -
:
 "   "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:13:29.337752300Z" />
    <EventRecordID>35076</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="592" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   </Data>
    <Data Name="param2"></Data>
    <Binary>70003200700069006D007300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:13:29
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:13:29.290952200Z" />
    <EventRecordID>35075</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="620" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>48006F006D006500470072006F00750070004C0069007300740065006E00650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:13:29
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:13:29.056951800Z" />
    <EventRecordID>35074</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="620" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>48006F006D006500470072006F0075007000500072006F00760069006400650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:13:29
 :   7036
 :
:       
 :
:  /
:     -
:
 "   "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:13:29.041351800Z" />
    <EventRecordID>35073</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="592" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   </Data>
    <Data Name="param2"></Data>
    <Binary>460044005200650073005000750062002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:13:28
 :   7036
 :
:       
 :
:  /
:     -
:
 "   "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:13:28.869751500Z" />
    <EventRecordID>35072</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="592" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   </Data>
    <Data Name="param2"></Data>
    <Binary>66006400500048006F00730074002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-WMPNSS-Service
:          15.03.2014 23:12:59
 :   14206
 :
:       
 :
:  /
:     -
:
  "-: :"  ,         .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-WMPNSS-Service" Guid="{6A2DC7C1-930A-4FB5-BB44-80B30AEBED6C}" EventSourceName="WMPNetworkSvc" />
    <EventID Qualifiers="16397">14206</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:59.000000000Z" />
    <EventRecordID>35071</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="FriendlyName">-: :</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:59
 :   7036
 :
:       
 :
:  /
:     -
:
 "  PNP-"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:59.167299300Z" />
    <EventRecordID>35070</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="624" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  PNP-</Data>
    <Data Name="param2"></Data>
    <Binary>750070006E00700068006F00730074002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:58
 :   7036
 :
:       
 :
:  /
:     -
:
 " SSDP"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:58.605698300Z" />
    <EventRecordID>35069</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="624" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> SSDP</Data>
    <Data Name="param2"></Data>
    <Binary>53005300440050005300520056002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:58
 :   7031
 :
:       
 :
:  /
:     -
:
 Windows Search   .   1 ().       30000 :  .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7031</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:58.215697600Z" />
    <EventRecordID>35068</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="2332" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">Windows Search</Data>
    <Data Name="param2">1</Data>
    <Data Name="param3">30000</Data>
    <Data Name="param4">1</Data>
    <Data Name="param5"> </Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:58
 :   7024
 :
:       
 :
:  /
:     -
:
 "Windows Search"  -   %%-1073473535.
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7024</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:58.215697600Z" />
    <EventRecordID>35067</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="624" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">Windows Search</Data>
    <Data Name="param2">%%-1073473535</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:58
 :   7036
 :
:       
 :
:  /
:     -
:
 "Windows Search"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:58.215697600Z" />
    <EventRecordID>35066</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="624" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">Windows Search</Data>
    <Data Name="param2"></Data>
    <Binary>57005300650061007200630068002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:57
 :   7036
 :
:       
 :
:  /
:     -
:
 "     Windows Media"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:57.498096400Z" />
    <EventRecordID>35065</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="592" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">     Windows Media</Data>
    <Data Name="param2"></Data>
    <Binary>57004D0050004E006500740077006F0072006B005300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:57
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:57.357696100Z" />
    <EventRecordID>35064</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="620" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>4E00650074006D0061006E002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-WMPNSS-Service
:          15.03.2014 23:12:57
 :   14204
 :
:       
 :
:  /
:     -
:
 "WMPNetworkSvc" .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-WMPNSS-Service" Guid="{6A2DC7C1-930A-4FB5-BB44-80B30AEBED6C}" EventSourceName="WMPNetworkSvc" />
    <EventID Qualifiers="16397">14204</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:57.000000000Z" />
    <EventRecordID>35063</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="ServiceName">WMPNetworkSvc</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:53
 :   7036
 :
:       
 :
:  /
:     -
:
 "   "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:53.286089000Z" />
    <EventRecordID>35062</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="624" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   </Data>
    <Data Name="param2"></Data>
    <Binary>410065004C006F006F006B00750070005300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:47
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:47.647678100Z" />
    <EventRecordID>35061</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="624" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>7300700070007300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:47
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:47.086077100Z" />
    <EventRecordID>35060</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="620" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-Winlogon
:          15.03.2014 23:12:46
 :   7001
 :(1101)
:       
 :
:  
:     -
:
        
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Winlogon" Guid="{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}" />
    <EventID>7001</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>1101</Task>
    <Opcode>0</Opcode>
    <Keywords>0x2000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:46.462076000Z" />
    <EventRecordID>35059</EventRecordID>
    <Correlation ActivityID="{67144949-5132-4859-8036-A737B43825D8}" />
    <Execution ProcessID="460" ThreadID="472" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="TSId">1</Data>
    <Data Name="UserSid">S-1-5-21-3368229806-3106785895-14530972-1000</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:39
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:39.270463400Z" />
    <EventRecordID>35058</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="592" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:38
 :   7036
 :
:       
 :
:  /
:     -
:
 "   - WinHTTP"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:38.318861700Z" />
    <EventRecordID>35057</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="592" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   - WinHTTP</Data>
    <Data Name="param2"></Data>
    <Binary>570069006E0048007400740070004100750074006F00500072006F00780079005300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:38
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:38.225261500Z" />
    <EventRecordID>35056</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="592" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>6E0065007400700072006F0066006D002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:38
 :   7036
 :
:       
 :
:  /
:     -
:
 "   "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:38.178461500Z" />
    <EventRecordID>35055</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="592" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   </Data>
    <Data Name="param2"></Data>
    <Binary>57005000440042007500730045006E0075006D002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:38
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:38.162861400Z" />
    <EventRecordID>35054</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="592" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>570064006900530079007300740065006D0048006F00730074002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:38
 :   7036
 :
:       
 :
:  /
:     -
:
 "  HID-"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:38.162861400Z" />
    <EventRecordID>35053</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="592" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  HID-</Data>
    <Data Name="param2"></Data>
    <Binary>68006900640073006500720076002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:38
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:38.006861200Z" />
    <EventRecordID>35052</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="592" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>570064006900530065007200760069006300650048006F00730074002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:37
 :   7036
 :
:       
 :
:  /
:     -
:
 ""    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:37.928861000Z" />
    <EventRecordID>35051</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="600" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"></Data>
    <Data Name="param2"></Data>
    <Binary>4C0061006E006D0061006E005300650072007600650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:37
 :   7036
 :
:       
 :
:  /
:     -
:
 "  IP"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:37.565260500Z" />
    <EventRecordID>35050</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="596" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  IP</Data>
    <Data Name="param2"></Data>
    <Binary>6900700068006C0070007300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:37
 :   7036
 :
:       
 :
:  /
:     -
:
 "  Windows"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:37.555260500Z" />
    <EventRecordID>35049</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="600" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  Windows</Data>
    <Data Name="param2"></Data>
    <Binary>570069006E006D0067006D0074002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:36
 :   7036
 :
:       
 :
:  /
:     -
:
 "   "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:36.435258900Z" />
    <EventRecordID>35048</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="616" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   </Data>
    <Data Name="param2"></Data>
    <Binary>540072006B0057006B0073002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:36
 :   7036
 :
:       
 :
:  /
:     -
:
 "    "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:36.435258900Z" />
    <EventRecordID>35047</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="600" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">    </Data>
    <Data Name="param2"></Data>
    <Binary>5000630061005300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:36
 :   7036
 :
:       
 :
:  /
:     -
:
 "Superfetch"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:36.435258900Z" />
    <EventRecordID>35046</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="596" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">Superfetch</Data>
    <Data Name="param2"></Data>
    <Binary>5300790073004D00610069006E002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-Application-Experience
:          15.03.2014 23:12:36
 :   201
 :
:       
 :
:  
:     -
:
      .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Application-Experience" Guid="{EEF54E71-0661-422D-9A98-82FD4940B820}" />
    <EventID>201</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:36.435258900Z" />
    <EventRecordID>35045</EventRecordID>
    <Correlation />
    <Execution ProcessID="844" ThreadID="1440" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:36
 :   7036
 :
:       
 :
:  /
:     -
:
 "   Windows (WIA)"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:36.325258700Z" />
    <EventRecordID>35044</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="596" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   Windows (WIA)</Data>
    <Data Name="param2"></Data>
    <Binary>7300740069007300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:36
 :   7036
 :
:       
 :
:  /
:     -
:
 "    "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:36.035258300Z" />
    <EventRecordID>35043</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="616" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">    </Data>
    <Data Name="param2"></Data>
    <Binary>4E006C0061005300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:35
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:35.815258000Z" />
    <EventRecordID>35042</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="600" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>430072007900700074005300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:35
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:35.795258000Z" />
    <EventRecordID>35041</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="592" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>4400500053002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:35
 :   7036
 :
:       
 :
:  /
:     -
:
 "Adobe Acrobat Update Service"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:35.785258000Z" />
    <EventRecordID>35040</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="592" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">Adobe Acrobat Update Service</Data>
    <Data Name="param2"></Data>
    <Binary>410064006F0062006500410052004D0073006500720076006900630065002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:34
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:34.005255500Z" />
    <EventRecordID>35039</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="592" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>4C0061006E006D0061006E0057006F0072006B00730074006100740069006F006E002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:32
 :   7036
 :
:       
 :
:  /
:     -
:
 " Windows"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:32.905254000Z" />
    <EventRecordID>35038</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="596" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> Windows</Data>
    <Data Name="param2"></Data>
    <Binary>4D00700073005300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:32
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:32.389652500Z" />
    <EventRecordID>35037</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="600" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>4200460045002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:32
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:32.077652000Z" />
    <EventRecordID>35036</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="596" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>530070006F006F006C00650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:31
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:31.937251700Z" />
    <EventRecordID>35035</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="596" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>5300630068006500640075006C0065002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:30
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:30.564449300Z" />
    <EventRecordID>35034</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="600" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>5300680065006C006C004800570044006500740065006300740069006F006E002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-WLAN-AutoConfig
:          15.03.2014 23:12:30
 :   4000
 :
:       
 :
:  
:     -
:
     .

Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-WLAN-AutoConfig" Guid="{9580D7DD-0379-4658-9870-D5BE7D52D6DE}" />
    <EventID>4000</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>1</Opcode>
    <Keywords>0x4000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:30.564449300Z" />
    <EventRecordID>35033</EventRecordID>
    <Correlation />
    <Execution ProcessID="844" ThreadID="1032" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:30
 :   7036
 :
:       
 :
:  /
:     -
:
 "  WLAN"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:30.564449300Z" />
    <EventRecordID>35032</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="600" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  WLAN</Data>
    <Data Name="param2"></Data>
    <Binary>57006C0061006E007300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:29
 :   7036
 :
:       
 :
:  /
:     -
:
 "DHCP-"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:29.971648300Z" />
    <EventRecordID>35031</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="600" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">DHCP-</Data>
    <Data Name="param2"></Data>
    <Binary>44006800630070002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-DHCPv6-Client
:          15.03.2014 23:12:29
 :   51046
 :  
:       
 :
:  LOCAL SERVICE
:     -
:
  DHCPv6 
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-DHCPv6-Client" Guid="{6A1F2B00-6A90-4C38-95A5-5CAB3B056778}" />
    <EventID>51046</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>4</Task>
    <Opcode>62</Opcode>
    <Keywords>0x2000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:29.971648300Z" />
    <EventRecordID>35030</EventRecordID>
    <Correlation />
    <Execution ProcessID="780" ThreadID="1040" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:29
 :   7036
 :
:       
 :
:  /
:     -
:
 "    (EAP)"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:29.846848100Z" />
    <EventRecordID>35029</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="600" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">    (EAP)</Data>
    <Data Name="param2"></Data>
    <Binary>45006100700048006F00730074002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:29
 :   7036
 :
:       
 :
:  /
:     -
:
 "DNS-"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:29.831248000Z" />
    <EventRecordID>35028</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="616" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">DNS-</Data>
    <Data Name="param2"></Data>
    <Binary>44006E007300630061006300680065002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:29
 :   7036
 :
:       
 :
:  /
:     -
:
 "  CNG"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:29.815648000Z" />
    <EventRecordID>35027</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="616" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  CNG</Data>
    <Data Name="param2"></Data>
    <Binary>4B0065007900490073006F002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:29
 :   7036
 :
:       
 :
:  /
:     -
:
 "  NetBIOS  TCP/IP"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:29.815648000Z" />
    <EventRecordID>35026</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="600" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  NetBIOS  TCP/IP</Data>
    <Data Name="param2"></Data>
    <Binary>6C006D0068006F007300740073002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-Dhcp-Client
:          15.03.2014 23:12:29
 :   50036
 :  
:       
 :
:  LOCAL SERVICE
:     -
:
  DHCPv4 
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Dhcp-Client" Guid="{15A7A4F8-0072-4EAB-ABAD-F98A4D666AED}" />
    <EventID>50036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>4</Task>
    <Opcode>68</Opcode>
    <Keywords>0x2000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:29.800048000Z" />
    <EventRecordID>35025</EventRecordID>
    <Correlation />
    <Execution ProcessID="780" ThreadID="720" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:29
 :   7036
 :
:       
 :
:  /
:     -
:
 "   "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:29.800048000Z" />
    <EventRecordID>35024</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="600" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   </Data>
    <Data Name="param2"></Data>
    <Binary>6E00730069002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:29
 :   7036
 :
:       
 :
:  /
:     -
:
 "   "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:29.784448000Z" />
    <EventRecordID>35023</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="616" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   </Data>
    <Data Name="param2"></Data>
    <Binary>530061006D00530073002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:29
 :   7036
 :
:       
 :
:  /
:     -
:
 "     "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:29.784448000Z" />
    <EventRecordID>35022</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="600" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">     </Data>
    <Data Name="param2"></Data>
    <Binary>5500780053006D0073002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:29
 :   7036
 :
:       
 :
:  /
:     -
:
 "    "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:29.768847900Z" />
    <EventRecordID>35021</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="600" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">    </Data>
    <Data Name="param2"></Data>
    <Binary>530045004E0053002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:29
 :   7036
 :
:       
 :
:  /
:     -
:
 "  COM+"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:29.768847900Z" />
    <EventRecordID>35020</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="600" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  COM+</Data>
    <Data Name="param2"></Data>
    <Binary>4500760065006E007400530079007300740065006D002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:29
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:29.768847900Z" />
    <EventRecordID>35019</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="616" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>500072006F0066005300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:29
 :   7036
 :
:       
 :
:  /
:     -
:
 ""    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:29.737647900Z" />
    <EventRecordID>35018</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="616" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"></Data>
    <Data Name="param2"></Data>
    <Binary>5400680065006D00650073002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:29
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:29.737647900Z" />
    <EventRecordID>35017</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="596" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>670070007300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:29
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:29.737647900Z" />
    <EventRecordID>35016</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="600" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>43007300630053006500720076006900630065002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:29
 :   7036
 :
:       
 :
:  /
:     -
:
 "Windows Audio"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:29.690847800Z" />
    <EventRecordID>35015</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="596" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">Windows Audio</Data>
    <Data Name="param2"></Data>
    <Binary>41007500640069006F005300720076002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:29
 :   7036
 :
:       
 :
:  /
:     -
:
 "    Windows Audio"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:29.628447700Z" />
    <EventRecordID>35014</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="600" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">    Windows Audio</Data>
    <Data Name="param2"></Data>
    <Binary>41007500640069006F0045006E00640070006F0069006E0074004200750069006C006400650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:29
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:29.347647200Z" />
    <EventRecordID>35013</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="596" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>4D004D004300530053002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:29
 :   7036
 :
:       
 :
:  /
:     -
:
 "   Windows"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:29.316447100Z" />
    <EventRecordID>35012</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="596" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   Windows</Data>
    <Data Name="param2"></Data>
    <Binary>46006F006E007400430061006300680065002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:29
 :   7036
 :
:       
 :
:  /
:     -
:
 "  Windows"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:29.191646900Z" />
    <EventRecordID>35011</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="596" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  Windows</Data>
    <Data Name="param2"></Data>
    <Binary>6500760065006E0074006C006F0067002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:29
 :   7036
 :
:       
 :
:  /
:     -
:
 "   (RPC)"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:29.066846700Z" />
    <EventRecordID>35010</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="596" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   (RPC)</Data>
    <Data Name="param2"></Data>
    <Binary>520070006300530073002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:29
 :   7036
 :
:       
 :
:  /
:     -
:
 "   RPC"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:29.020046600Z" />
    <EventRecordID>35009</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="596" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   RPC</Data>
    <Data Name="param2"></Data>
    <Binary>5200700063004500700074004D00610070007000650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:29
 :   7036
 :
:       
 :
:  /
:     -
:
 "   DCOM-"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:29.004446600Z" />
    <EventRecordID>35008</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="596" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   DCOM-</Data>
    <Data Name="param2"></Data>
    <Binary>440063006F006D004C00610075006E00630068002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-FilterManager
:          15.03.2014 23:12:29
 :   6
 :
:       
 :
:  
:     -
:
   "luafv" ( 6.1, ?2009?-?07?-?14T07:26:13.000000000Z)       .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-FilterManager" Guid="{F3C5E28E-63F6-49C7-A204-E48A1BC4B09D}" />
    <EventID>6</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:29.004446600Z" />
    <EventRecordID>35007</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="44" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="FinalStatus">0x0</Data>
    <Data Name="DeviceVersionMajor">6</Data>
    <Data Name="DeviceVersionMinor">1</Data>
    <Data Name="DeviceNameLength">5</Data>
    <Data Name="DeviceName">luafv</Data>
    <Data Name="DeviceTime">2009-07-14T07:26:13.000000000Z</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:28
 :   7036
 :
:       
 :
:  /
:     -
:
 ""    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:28.973246500Z" />
    <EventRecordID>35006</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="596" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"></Data>
    <Data Name="param2"></Data>
    <Binary>50006F007700650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-UserPnp
:          15.03.2014 23:12:28
 :   20010
 :(7010)
:       
 :
:  
:     -
:
     (Plug and Play). 

   PlugPlay: "true" 
   PlugPlay: "true" 

Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-UserPnp" Guid="{96F4A050-7E31-453C-88BE-9634F4E02139}" />
    <EventID>20010</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>7010</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:28.645646000Z" />
    <EventRecordID>35005</EventRecordID>
    <Correlation />
    <Execution ProcessID="628" ThreadID="644" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <UserData>
    <INFO_PNP_STATE xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://manifests.microsoft.com/win/2004/08/windows/userpnp">
      <InstallSubsystemState>true</InstallSubsystemState>
      <CachingSubsystemState>true</CachingSubsystemState>
    </INFO_PNP_STATE>
  </UserData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:12:28
 :   7036
 :
:       
 :
:  /
:     -
:
 "Plug-and-Play"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:28.645646000Z" />
    <EventRecordID>35004</EventRecordID>
    <Correlation />
    <Execution ProcessID="496" ThreadID="600" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">Plug-and-Play</Data>
    <Data Name="param2"></Data>
    <Binary>50006C007500670050006C00610079002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-Kernel-Processor-Power
:          15.03.2014 23:12:12
 :   26
 :(4)
:       
 :
:  
:     -
:
 1   0   :  : 

3,  : 
3,   : 
8
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Kernel-Processor-Power" Guid="{0F67E49F-FE51-4E9F-B490-6F2948CC6027}" />
    <EventID>26</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>4</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:12.842818200Z" />
    <EventRecordID>35003</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="44" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="Group">0</Data>
    <Data Name="Number">1</Data>
    <Data Name="IdleStateCount">3</Data>
    <Data Name="PerfStateCount">3</Data>
    <Data Name="ThrottleStateCount">8</Data>
    <ComplexData Name="IdleState">010203</ComplexData>
    <ComplexData Name="PerfState">3408000064000000400600004C000000B004000039000000</ComplexData>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-Kernel-Processor-Power
:          15.03.2014 23:12:12
 :   26
 :(4)
:       
 :
:  
:     -
:
 0   0   :  : 

3,  : 
3,   : 
8
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Kernel-Processor-Power" Guid="{0F67E49F-FE51-4E9F-B490-6F2948CC6027}" />
    <EventID>26</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>4</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:12.624417800Z" />
    <EventRecordID>35002</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="44" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="Group">0</Data>
    <Data Name="Number">0</Data>
    <Data Name="IdleStateCount">3</Data>
    <Data Name="PerfStateCount">3</Data>
    <Data Name="ThrottleStateCount">8</Data>
    <ComplexData Name="IdleState">010203</ComplexData>
    <ComplexData Name="PerfState">3408000064000000400600004C000000B004000039000000</ComplexData>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-Kernel-Power
:          15.03.2014 23:12:10
 :   89
 :(86)
:       
 :(32)
:  
:     -
:
    ACPI ACPI\ThermalZone\THRM.             
_PSV = 378             
_TC1 = 2             
_TC2 = 3             
_TSP = 4000             
_AC0 = 0             
_AC1 = 0             
_AC2 = 0             
_AC3 = 0             
_AC4 = 0             
_AC5 = 0             
_AC6 = 0             
_AC7 = 0             
_AC8 = 0             
_AC9 = 0             
_CRT = 381             
_HOT = 0             
_PSL - .  .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
    <EventID>89</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>86</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000020</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:10.456014000Z" />
    <EventRecordID>35001</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="52" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="ThermalZoneDeviceInstanceLength">21</Data>
    <Data Name="ThermalZoneDeviceInstance">ACPI\ThermalZone\THRM</Data>
    <Data Name="AffinityCount">1</Data>
    <Data Name="_PSV">378</Data>
    <Data Name="_TC1">2</Data>
    <Data Name="_TC2">3</Data>
    <Data Name="_TSP">4000</Data>
    <Data Name="_AC0">0</Data>
    <Data Name="_AC1">0</Data>
    <Data Name="_AC2">0</Data>
    <Data Name="_AC3">0</Data>
    <Data Name="_AC4">0</Data>
    <Data Name="_AC5">0</Data>
    <Data Name="_AC6">0</Data>
    <Data Name="_AC7">0</Data>
    <Data Name="_AC8">0</Data>
    <Data Name="_AC9">0</Data>
    <Data Name="_CRT">381</Data>
    <Data Name="_HOT">0</Data>
    <ComplexData Name="_PSL">0000000000000000</ComplexData>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-FilterManager
:          15.03.2014 23:12:05
 :   6
 :
:       
 :
:  
:     -
:
   "FileInfo" ( 6.1, ?2009?-?07?-?14T07:34:25.000000000Z)       .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-FilterManager" Guid="{F3C5E28E-63F6-49C7-A204-E48A1BC4B09D}" />
    <EventID>6</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:05.573205400Z" />
    <EventRecordID>35000</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="8" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="FinalStatus">0x0</Data>
    <Data Name="DeviceVersionMajor">6</Data>
    <Data Name="DeviceVersionMinor">1</Data>
    <Data Name="DeviceNameLength">8</Data>
    <Data Name="DeviceName">FileInfo</Data>
    <Data Name="DeviceTime">2009-07-14T07:34:25.000000000Z</Data>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-Kernel-General
:          15.03.2014 23:12:02
 :   12
 :
:       
 :
:  
:     -
:
    : ?2014?-?03?-?15T15:12:02.375199800Z.
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Kernel-General" Guid="{A68CA8B7-004F-D7B6-A698-07E2DE0F1F5D}" />
    <EventID>12</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:02.734000400Z" />
    <EventRecordID>34999</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="8" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="MajorVersion">6</Data>
    <Data Name="MinorVersion">1</Data>
    <Data Name="BuildVersion">7601</Data>
    <Data Name="QfeVersion">18247</Data>
    <Data Name="ServiceVersion">1</Data>
    <Data Name="BootMode">0</Data>
    <Data Name="StartTime">2014-03-15T15:12:02.375199800Z</Data>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-Kernel-General
:          15.03.2014 23:11:41
 :   13
 :
:       
 :
:  /
:     -
:
     : ?2014?-?03?-?15T15:11:41.347302000Z.
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Kernel-General" Guid="{A68CA8B7-004F-D7B6-A698-07E2DE0F1F5D}" />
    <EventID>13</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:41.347302000Z" />
    <EventRecordID>34998</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="3380" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="StopTime">2014-03-15T15:11:41.347302000Z</Data>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-Kernel-Power
:          15.03.2014 23:11:37
 :   109
 :(103)
:       
 :(4)
:  /
:     -
:
     .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
    <EventID>109</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>103</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000004</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:37.946496000Z" />
    <EventRecordID>34997</EventRecordID>
    <Correlation />
    <Execution ProcessID="396" ThreadID="400" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="ShutdownActionType">5</Data>
    <Data Name="ShutdownEventCode">0</Data>
    <Data Name="ShutdownReason">5</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:11:37
 :   7036
 :
:       
 :
:  /
:     -
:
 "Windows Search"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:37.416095100Z" />
    <EventRecordID>34996</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1760" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">Windows Search</Data>
    <Data Name="param2"></Data>
    <Binary>57005300650061007200630068002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:11:37
 :   7036
 :
:       
 :
:  /
:     -
:
 "   Windows"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:37.104094500Z" />
    <EventRecordID>34995</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1760" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   Windows</Data>
    <Data Name="param2"></Data>
    <Binary>46006F006E007400430061006300680065002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:11:36
 :   7036
 :
:       
 :
:  /
:     -
:
 " PNRP"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:36.495693500Z" />
    <EventRecordID>34994</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1760" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> PNRP</Data>
    <Data Name="param2"></Data>
    <Binary>50004E00520050007300760063002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:11:36
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:36.402093300Z" />
    <EventRecordID>34993</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2004" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>7000320070007300760063002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:11:36
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:36.324093200Z" />
    <EventRecordID>34992</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2004" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>430072007900700074005300760063002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:11:36
 :   7036
 :
:       
 :
:  /
:     -
:
 "  Windows"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:36.136892800Z" />
    <EventRecordID>34991</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2004" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  Windows</Data>
    <Data Name="param2"></Data>
    <Binary>540072007500730074006500640049006E007300740061006C006C00650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:11:35
 :   7036
 :
:       
 :
:  /
:     -
:
 "  PNP-"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:35.809292300Z" />
    <EventRecordID>34990</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2004" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  PNP-</Data>
    <Data Name="param2"></Data>
    <Binary>750070006E00700068006F00730074002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:11:35
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:35.575291900Z" />
    <EventRecordID>34989</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2004" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>7300700070007300760063002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:11:35
 :   7036
 :
:       
 :
:  /
:     -
:
 "  WLAN"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:35.544091800Z" />
    <EventRecordID>34988</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2004" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  WLAN</Data>
    <Data Name="param2"></Data>
    <Binary>57006C0061006E007300760063002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-WLAN-AutoConfig
:          15.03.2014 23:11:35
 :   4001
 :
:       
 :
:  
:     -
:
     .

Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-WLAN-AutoConfig" Guid="{9580D7DD-0379-4658-9870-D5BE7D52D6DE}" />
    <EventID>4001</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>2</Opcode>
    <Keywords>0x4000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:35.544091800Z" />
    <EventRecordID>34987</EventRecordID>
    <Correlation />
    <Execution ProcessID="828" ThreadID="1272" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:11:35
 :   7036
 :
:       
 :
:  /
:     -
:
 "Plug-and-Play"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:35.325691400Z" />
    <EventRecordID>34986</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2004" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">Plug-and-Play</Data>
    <Data Name="param2"></Data>
    <Binary>50006C007500670050006C00610079002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-UserPnp
:          15.03.2014 23:11:35
 :   20010
 :(7010)
:       
 :
:  
:     -
:
     (Plug and Play). 

   PlugPlay: "false" 
   PlugPlay: "false" 

Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-UserPnp" Guid="{96F4A050-7E31-453C-88BE-9634F4E02139}" />
    <EventID>20010</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>7010</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:35.325691400Z" />
    <EventRecordID>34985</EventRecordID>
    <Correlation />
    <Execution ProcessID="592" ThreadID="2228" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <UserData>
    <INFO_PNP_STATE xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://manifests.microsoft.com/win/2004/08/windows/userpnp">
      <InstallSubsystemState>false</InstallSubsystemState>
      <CachingSubsystemState>false</CachingSubsystemState>
    </INFO_PNP_STATE>
  </UserData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:11:35
 :   7036
 :
:       
 :
:  /
:     -
:
 "Superfetch"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:35.310091400Z" />
    <EventRecordID>34984</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2004" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">Superfetch</Data>
    <Data Name="param2"></Data>
    <Binary>5300790073004D00610069006E002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:11:35
 :   7036
 :
:       
 :
:  /
:     -
:
 "   Windows (WIA)"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:35.138491100Z" />
    <EventRecordID>34983</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2004" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   Windows (WIA)</Data>
    <Data Name="param2"></Data>
    <Binary>7300740069007300760063002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:11:35
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:35.122891100Z" />
    <EventRecordID>34982</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2004" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>7700730063007300760063002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      EventLog
:          15.03.2014 23:12:29
 :   6013
 :
:       
 :
:  /
:     -
:
   26 .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="EventLog" />
    <EventID Qualifiers="32768">6013</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:29.000000000Z" />
    <EventRecordID>34981</EventRecordID>
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>26</Data>
    <Data>60</Data>
    <Data>-480   ()</Data>
    <Binary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inary>
  </EventData>
</Event>

 :   System
:      EventLog
:          15.03.2014 23:12:29
 :   6005
 :
:       
 :
:  /
:     -
:
   .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="EventLog" />
    <EventID Qualifiers="32768">6005</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:29.000000000Z" />
    <EventRecordID>34980</EventRecordID>
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Binary>DE07030006000F000F000C001D0071000000000000000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:11:34
 :   7036
 :
:       
 :
:  /
:     -
:
 "   "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:34.935690700Z" />
    <EventRecordID>34979</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2004" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   </Data>
    <Data Name="param2"></Data>
    <Binary>460044005200650073005000750062002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:11:34
 :   7036
 :
:       
 :
:  /
:     -
:
 "  Windows"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:34.920090700Z" />
    <EventRecordID>34978</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2004" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  Windows</Data>
    <Data Name="param2"></Data>
    <Binary>6500760065006E0074006C006F0067002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:11:34
 :   7036
 :
:       
 :
:  /
:     -
:
 "  Windows"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:34.888890600Z" />
    <EventRecordID>34977</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2004" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  Windows</Data>
    <Data Name="param2"></Data>
    <Binary>570069006E006D0067006D0074002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      EventLog
:          15.03.2014 23:12:29
 :   6009
 :
:       
 :
:  /
:     -
:
Microsoft (R) Windows (R) 6.01. 7601 Service Pack 1 Multiprocessor Free.
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="EventLog" />
    <EventID Qualifiers="32768">6009</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:12:29.000000000Z" />
    <EventRecordID>34976</EventRecordID>
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data>6.01.</Data>
    <Data>7601</Data>
    <Data>Service Pack 1</Data>
    <Data>Multiprocessor Free</Data>
    <Data>17514</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:11:34
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:34.857690600Z" />
    <EventRecordID>34975</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2004" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>500072006F0066005300760063002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:11:34
 :   7036
 :
:       
 :
:  /
:     -
:
 " Windows"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:34.842090600Z" />
    <EventRecordID>34974</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2004" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> Windows</Data>
    <Data Name="param2"></Data>
    <Binary>570069006E0044006500660065006E0064002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:11:34
 :   7036
 :
:       
 :
:  /
:     -
:
 "   "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:34.795290500Z" />
    <EventRecordID>34973</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2004" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   </Data>
    <Data Name="param2"></Data>
    <Binary>540072006B0057006B0073002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:11:34
 :   7036
 :
:       
 :
:  /
:     -
:
 "     "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:34.795290500Z" />
    <EventRecordID>34972</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1760" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">     </Data>
    <Data Name="param2"></Data>
    <Binary>5500780053006D0073002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:11:34
 :   7036
 :
:       
 :
:  /
:     -
:
 " SSDP"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:34.795290500Z" />
    <EventRecordID>34971</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1760" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> SSDP</Data>
    <Data Name="param2"></Data>
    <Binary>53005300440050005300520056002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:11:34
 :   7036
 :
:       
 :
:  /
:     -
:
 "DHCP-"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:34.764090400Z" />
    <EventRecordID>34970</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2004" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">DHCP-</Data>
    <Data Name="param2"></Data>
    <Binary>44006800630070002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:11:34
 :   7036
 :
:       
 :
:  /
:     -
:
 ""    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:34.732890400Z" />
    <EventRecordID>34969</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2004" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"></Data>
    <Data Name="param2"></Data>
    <Binary>50006F007700650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:11:34
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:34.732890400Z" />
    <EventRecordID>34968</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1760" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>4400500053002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:11:34
 :   7036
 :
:       
 :
:  /
:     -
:
 "    (EAP)"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:34.717290300Z" />
    <EventRecordID>34967</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1760" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">    (EAP)</Data>
    <Data Name="param2"></Data>
    <Binary>45006100700048006F00730074002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-Dhcp-Client
:          15.03.2014 23:11:34
 :   50037
 :  
:       
 :
:  LOCAL SERVICE
:     -
:
   DHCPv4.    : 1
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Dhcp-Client" Guid="{15A7A4F8-0072-4EAB-ABAD-F98A4D666AED}" />
    <EventID>50037</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>4</Task>
    <Opcode>69</Opcode>
    <Keywords>0x2000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:34.717290300Z" />
    <EventRecordID>34966</EventRecordID>
    <Correlation />
    <Execution ProcessID="788" ThreadID="716" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData>
    <Data Name="DwordVal">1</Data>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-DHCPv6-Client
:          15.03.2014 23:11:34
 :   51047
 :  
:       
 :
:  LOCAL SERVICE
:     -
:
  DHCPv6 .    : 1
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-DHCPv6-Client" Guid="{6A1F2B00-6A90-4C38-95A5-5CAB3B056778}" />
    <EventID>51047</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>4</Task>
    <Opcode>63</Opcode>
    <Keywords>0x2000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:34.717290300Z" />
    <EventRecordID>34965</EventRecordID>
    <Correlation />
    <Execution ProcessID="788" ThreadID="1044" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData>
    <Data Name="DwordVal">1</Data>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:11:34
 :   7036
 :
:       
 :
:  /
:     -
:
 "   "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:34.701690300Z" />
    <EventRecordID>34964</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1760" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   </Data>
    <Data Name="param2"></Data>
    <Binary>70003200700069006D007300760063002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:11:34
 :   7036
 :
:       
 :
:  /
:     -
:
 "  HID-"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:34.701690300Z" />
    <EventRecordID>34963</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="1760" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  HID-</Data>
    <Data Name="param2"></Data>
    <Binary>68006900640073006500720076002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:11:34
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:34.701690300Z" />
    <EventRecordID>34962</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2004" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>570064006900530065007200760069006300650048006F00730074002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:11:34
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:34.514490000Z" />
    <EventRecordID>34961</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2004" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>670070007300760063002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:11:34
 :   7036
 :
:       
 :
:  /
:     -
:
 "  Windows"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:34.420889800Z" />
    <EventRecordID>34960</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2188" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  Windows</Data>
    <Data Name="param2"></Data>
    <Binary>770075006100750073006500720076002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-WindowsUpdateClient
:          15.03.2014 23:11:34
 :   27
 :   Windows
:       
 :
:  
:     -
:
  .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-WindowsUpdateClient" Guid="{945A8954-C147-4ACD-923F-40C45405A658}" />
    <EventID>27</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>1</Task>
    <Opcode>16</Opcode>
    <Keywords>0x8000000000000080</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:34.264889500Z" />
    <EventRecordID>34959</EventRecordID>
    <Correlation />
    <Execution ProcessID="888" ThreadID="1716" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:11:34
 :   7036
 :
:       
 :
:  /
:     -
:
 "  Windows"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:34.202489400Z" />
    <EventRecordID>34958</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2188" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  Windows</Data>
    <Data Name="param2"></Data>
    <Binary>540072007500730074006500640049006E007300740061006C006C00650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      EventLog
:          15.03.2014 23:11:34
 :   6006
 :
:       
 :
:  /
:     -
:
   .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="EventLog" />
    <EventID Qualifiers="32768">6006</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:34.000000000Z" />
    <EventRecordID>34957</EventRecordID>
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Binary>0100000065330000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-Winlogon
:          15.03.2014 23:11:32
 :   7002
 :(1102)
:       
 :
:  
:     -
:
        
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Winlogon" Guid="{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}" />
    <EventID>7002</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>1102</Task>
    <Opcode>0</Opcode>
    <Keywords>0x2000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:32.751686900Z" />
    <EventRecordID>34956</EventRecordID>
    <Correlation ActivityID="{2698178D-FDAD-40AE-9D3C-1371703ADC5B}" />
    <Execution ProcessID="2404" ThreadID="3420" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="TSId">2</Data>
    <Data Name="UserSid">S-1-5-21-3368229806-3106785895-14530972-1000</Data>
  </EventData>
</Event>

 :   System
:      USER32
:          15.03.2014 23:11:32
 :   1074
 :
:       
 :
:  -\
:     -
:
 C:\Windows\system32\winlogon.exe (-)   ""   -    -\  :   
  : 0x500ff
  : 
 : 
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="USER32" />
    <EventID Qualifiers="32768">1074</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:32.000000000Z" />
    <EventRecordID>34955</EventRecordID>
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-21-3368229806-3106785895-14530972-1000" />
  </System>
  <EventData>
    <Data>C:\Windows\system32\winlogon.exe (-)</Data>
    <Data>-</Data>
    <Data>  </Data>
    <Data>0x500ff</Data>
    <Data></Data>
    <Data>
    </Data>
    <Data>-\</Data>
    <Binary>FF000500000000000000000000000000000000000000000000000000000000000000000000000000</Binary>
  </EventData>
</Event>

 :   System
:      USER32
:          15.03.2014 23:11:28
 :   1074
 :
:       
 :
:  -\
:     -
:
 Explorer.EXE   ""   -    -\  :  ()
  : 0x0
  : 
 : 
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="USER32" />
    <EventID Qualifiers="32768">1074</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:28.000000000Z" />
    <EventRecordID>34954</EventRecordID>
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-21-3368229806-3106785895-14530972-1000" />
  </System>
  <EventData>
    <Data>Explorer.EXE</Data>
    <Data>-</Data>
    <Data> ()</Data>
    <Data>0x0</Data>
    <Data></Data>
    <Data>
    </Data>
    <Data>-\</Data>
    <Binary>00000000000000000000000000000000000000000000000000000000000000000000000000000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:11:18
 :   7036
 :
:       
 :
:  /
:     -
:
 "   "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:11:18.148858900Z" />
    <EventRecordID>34953</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2188" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   </Data>
    <Data Name="param2"></Data>
    <Binary>410065004C006F006F006B00750070005300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:09:13
 :   7036
 :
:       
 :
:  /
:     -
:
 "  "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:09:13.591057600Z" />
    <EventRecordID>34952</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2428" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">  </Data>
    <Data Name="param2"></Data>
    <Binary>7300700070007300760063002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:08:40
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:08:40.206999000Z" />
    <EventRecordID>34951</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2428" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:08:34
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:08:34.154188300Z" />
    <EventRecordID>34950</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2428" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:06:32
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:06:32.191974700Z" />
    <EventRecordID>34949</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="3424" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:06:26
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:06:26.154764000Z" />
    <EventRecordID>34948</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="3424" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:01:32
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:01:32.195454200Z" />
    <EventRecordID>34947</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="3940" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 23:01:26
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T15:01:26.158243600Z" />
    <EventRecordID>34946</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="3940" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 22:59:24
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T14:59:24.181629400Z" />
    <EventRecordID>34945</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="3860" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 22:59:19
 :   7036
 :
:       
 :
:  /
:     -
:
 "   - WinHTTP"    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T14:59:19.548421200Z" />
    <EventRecordID>34944</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="3860" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   - WinHTTP</Data>
    <Data Name="param2"></Data>
    <Binary>570069006E0048007400740070004100750074006F00500072006F00780079005300760063002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 22:59:18
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T14:59:18.144418800Z" />
    <EventRecordID>34943</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="3860" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 22:55:03
 :   7036
 :
:       
 :
:  /
:     -
:
 "   "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T14:55:03.704577200Z" />
    <EventRecordID>34942</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2636" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">   </Data>
    <Data Name="param2"></Data>
    <Binary>410065004C006F006F006B00750070005300760063002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 22:54:24
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T14:54:24.190909800Z" />
    <EventRecordID>34941</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="2320" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 22:54:18
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T14:54:18.153699200Z" />
    <EventRecordID>34940</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="3712" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 22:52:18
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T14:52:18.170693000Z" />
    <EventRecordID>34939</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="3832" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0031000000</Binary>
  </EventData>
</Event>

 :   System
:      Service Control Manager
:          15.03.2014 22:52:12
 :   7036
 :
:       
 :
:  /
:     -
:
 " "    .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="16384">7036</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T14:52:12.145483400Z" />
    <EventRecordID>34938</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="3832" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1"> </Data>
    <Data Name="param2"></Data>
    <Binary>420072006F0077007300650072002F0034000000</Binary>
  </EventData>
</Event>

 :   System
:      Microsoft-Windows-Eventlog
:          15.03.2014 22:48:44
 :   104
 : 
:       
 :
:  -\
:     -
:
  Windows PowerShell .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Eventlog" Guid="{fc65ddd8-d6ef-4962-83d5-6e5cfe9ce148}" />
    <EventID>104</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>104</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T14:48:44.263920900Z" />
    <EventRecordID>34937</EventRecordID>
    <Correlation />
    <Execution ProcessID="788" ThreadID="4056" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-21-3368229806-3106785895-14530972-1000" />
  </System>
  <UserData>
    <LogFileCleared xmlns:auto-ns3="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://manifests.microsoft.com/win/2004/08/windows/eventlog">
      <SubjectUserName></SubjectUserName>
      <SubjectDomainName>-</SubjectDomainName>
      <Channel>Windows PowerShell</Channel>
      <BackupPath>
      </BackupPath>
    </LogFileCleared>
  </UserData>
</Event>

 :   System
:      Microsoft-Windows-Eventlog
:          15.03.2014 22:48:44
 :   104
 : 
:       
 :
:  -\
:     -
:
  System .
Xml :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Eventlog" Guid="{fc65ddd8-d6ef-4962-83d5-6e5cfe9ce148}" />
    <EventID>104</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>104</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-15T14:48:44.201520800Z" />
    <EventRecordID>34936</EventRecordID>
    <Correlation />
    <Execution ProcessID="788" ThreadID="4056" />
    <Channel>System</Channel>
    <Computer>-</Computer>
    <Security UserID="S-1-5-21-3368229806-3106785895-14530972-1000" />
  </System>
  <UserData>
    <LogFileCleared xmlns:auto-ns3="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://manifests.microsoft.com/win/2004/08/windows/eventlog">
      <SubjectUserName></SubjectUserName>
      <SubjectDomainName>-</SubjectDomainName>
      <Channel>System</Channel>
      <BackupPath>
      </BackupPath>
    </LogFileCleared>
  </UserData>
</Event>