<?xml version=1.0 encoding=utf-8 standalone=yes ?>
- <Events>
- <Event xmlns=[url]http://schemas.microsoft.com/win/2004/08/events/event>[/url]
- <System>
<Provider Name=MsiInstaller />
<EventID Qualifiers=0>1033</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime=2009-04-06T18:55:58.000Z />
<EventRecordID>20541</EventRecordID>
<Channel>Application</Channel>
<Computer>MYPCNAME</Computer>
<Security UserID=S-1-5-21-2240945698-4128327801-819782175-1000 />
</System>
- <EventData>
<Data>Norton Ghost</Data>
<Data>14.0.0.24815</Data>
<Data>1033</Data>
<Data>1603</Data>
<Data>(NULL)</Data>
<Data />
<Data />
<Binary>7B42303235353734332D313635422D344244352D384441382D3337444642393933303031347D</Binary>
</EventData>
</Event>
- <Event xmlns=[url]http://schemas.microsoft.com/win/2004/08/events/event>[/url]
- <System>
<Provider Name=MsiInstaller />
<EventID Qualifiers=0>11708</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime=2009-04-06T18:55:58.000Z />
<EventRecordID>20540</EventRecordID>
<Channel>Application</Channel>
<Computer>MYPCNAME</Computer>
<Security UserID=S-1-5-21-2240945698-4128327801-819782175-1000 />
</System>
- <EventData>
<Data>Product: Norton Ghost -- Installation operation failed.</Data>
<Data>(NULL)</Data>
<Data>(NULL)</Data>
<Data>(NULL)</Data>
<Data>(NULL)</Data>
<Data />
<Data />
<Binary>7B42303235353734332D313635422D344244352D384441382D3337444642393933303031347D</Binary>
</EventData>
</Event>
- <Event xmlns=[url]http://schemas.microsoft.com/win/2004/08/events/event>[/url]
- <System>
<Provider Name=Microsoft-Windows-RestartManager Guid={0888e5ef-9b98-4695-979d-e92ce4247224} />
<EventID>10001</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime=2009-04-06T18:55:33.444Z />
<EventRecordID>20539</EventRecordID>
<Correlation />
<Execution ProcessID=4864 ThreadID=2360 />
<Channel>Application</Channel>
<Computer>MYPCNAME</Computer>
<Security UserID=S-1-5-21-2240945698-4128327801-819782175-1000 />
</System>
- <UserData>
- <RmSessionEvent xmlns:auto-ns2=[url]http://schemas.microsoft.com/win/2004/08/events[/url] xmlns=[url]http://www.microsoft.com/2005/08/Windows/Reliability/RestartManager/>[/url]
<RmSessionId>1</RmSessionId>
<UTCStartTime>2009-04-06T18:46:40.185Z</UTCStartTime>
</RmSessionEvent>
</UserData>
</Event>
- <Event xmlns=[url]http://schemas.microsoft.com/win/2004/08/events/event>[/url]
- <System>
<Provider Name=MsiInstaller />
<EventID Qualifiers=0>1042</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime=2009-04-06T18:55:33.000Z />
<EventRecordID>20538</EventRecordID>
<Channel>Application</Channel>
<Computer>MYPCNAME</Computer>
<Security UserID=S-1-5-18 />
</System>
- <EventData>
<Data>G:\INSTALL\NGhost14.msi</Data>
<Data>3936</Data>
<Data>(NULL)</Data>
<Data>(NULL)</Data>
<Data>(NULL)</Data>
<Data />
<Data />
</EventData>
</Event>
- <Event xmlns=[url]http://schemas.microsoft.com/win/2004/08/events/event>[/url]
- <System>
<Provider Name=MsiInstaller />
<EventID Qualifiers=0>11935</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime=2009-04-06T18:55:22.000Z />
<EventRecordID>20537</EventRecordID>
<Channel>Application</Channel>
<Computer>MYPCNAME</Computer>
<Security UserID=S-1-5-21-2240945698-4128327801-819782175-1000 />
</System>
- <EventData>
<Data>Product: Norton Ghost -- Error 1935.An error occurred during the installation of assembly component {63E949F6-03BC-5C40-A01F-C8B3B9A1E18E}. HRESULT: 0x800736FD. assembly interface: IAssemblyCacheItem, function: Commit, assembly name: policy.8.0.Microsoft.VC80.CRT,type=win32-policy,version=8.0.50727.42,publicKeyToken=1fc8b3b9a1e18e3b,processorArchitecture=x86</Data>
<Data>(NULL)</Data>
<Data>(NULL)</Data>
<Data>(NULL)</Data>
<Data>(NULL)</Data>
<Data />
<Data />
<Binary>7B42303235353734332D313635422D344244352D384441382D3337444642393933303031347D</Binary>
</EventData>
</Event>
- <Event xmlns=[url]http://schemas.microsoft.com/win/2004/08/events/event>[/url]
- <System>
<Provider Name=VSS />
<EventID Qualifiers=0>8224</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime=2009-04-06T18:49:45.000Z />
<EventRecordID>20536</EventRecordID>
<Channel>Application</Channel>
<Computer>MYPCNAME</Computer>
<Security />
</System>
- <EventData>
<Data />
<Binary>2D20436F64653A2020434F525356434330303030303737352D2043616C6C3A2020434F525356434330303030303735372D205049443A202030303030323339362D205449443A202030303030343337362D20434D443A2020433A5C57696E646F77735C73797374656D33325C76737376632E6578652020202D20557365723A204E542D4155544F524954C4545C53595354454D20202020202D205369643A2020532D312D352D3138</Binary>
</EventData>
</Event>
- <Event xmlns=[url]http://schemas.microsoft.com/win/2004/08/events/event>[/url]
- <System>
<Provider Name=Microsoft-Windows-RestartManager Guid={0888e5ef-9b98-4695-979d-e92ce4247224} />
<EventID>10000</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime=2009-04-06T18:46:40.185Z />
<EventRecordID>20535</EventRecordID>
<Correlation />
<Execution ProcessID=4864 ThreadID=4272 />
<Channel>Application</Channel>
<Computer>MYPCNAME</Computer>
<Security UserID=S-1-5-21-2240945698-4128327801-819782175-1000 />
</System>
- <UserData>
- <RmSessionEvent xmlns:auto-ns2=[url]http://schemas.microsoft.com/win/2004/08/events[/url] xmlns=[url]http://www.microsoft.com/2005/08/Windows/Reliability/RestartManager/>[/url]
<RmSessionId>1</RmSessionId>
<UTCStartTime>2009-04-06T18:46:40.185Z</UTCStartTime>
</RmSessionEvent>
</UserData>
</Event>
- <Event xmlns=[url]http://schemas.microsoft.com/win/2004/08/events/event>[/url]
- <System>
<Provider Name=System Restore />
<EventID Qualifiers=0>8194</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime=2009-04-06T18:46:32.000Z />
<EventRecordID>20534</EventRecordID>
<Channel>Application</Channel>
<Computer>MYPCNAME</Computer>
<Security />
</System>
- <EventData>
<Data>C:\Windows\system32\msiexec.exe /V</Data>
<Data>Installed Norton Ghost.</Data>
<Binary>0000000006020000D60100000000000032CA19E58CAF4DCB010000000000000000000000</Binary>
</EventData>
</Event>
- <Event xmlns=[url]http://schemas.microsoft.com/win/2004/08/events/event>[/url]
- <System>
<Provider Name=MsiInstaller />
<EventID Qualifiers=0>1040</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime=2009-04-06T18:46:20.000Z />
<EventRecordID>20533</EventRecordID>
<Channel>Application</Channel>
<Computer>MYPCNAME</Computer>
<Security UserID=S-1-5-21-2240945698-4128327801-819782175-1000 />
</System>
- <EventData>
<Data>G:\INSTALL\NGhost14.msi</Data>
<Data>3936</Data>
<Data>(NULL)</Data>
<Data>(NULL)</Data>
<Data>(NULL)</Data>
<Data />
<Data />
</EventData>
</Event>
- <Event xmlns=[url]http://schemas.microsoft.com/win/2004/08/events/event>[/url]
- <System>
<Provider Name=Microsoft-Windows-LoadPerf Guid={122EE297-BB47-41AE-B265-1CA8D1886D40} EventSourceName=LoadPerf />
<EventID Qualifiers=16384>1000</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime=2009-04-06T17:37:15.000Z />
<EventRecordID>20532</EventRecordID>
<Correlation />
<Execution ProcessID=0 ThreadID=0 />
<Channel>Application</Channel>
<Computer>MYPCNAME</Computer>
<Security />
</System>
- <UserData>
- <EventXML xmlns:auto-ns2=[url]http://schemas.microsoft.com/win/2004/08/events[/url] xmlns=LoadPerf>
<param1>WmiApRpl</param1>
<param2>WmiApRpl</param2>
<binaryDataSize>16</binaryDataSize>
<binaryData>281D0000EA1D0000291D0000EB1D0000</binaryData>
</EventXML>
</UserData>
</Event>
</Events>