Windows NT KAMIDAKI 10.0 build 19045 (Windows 10) AMD64
Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.3.9
Server IP : 192.168.3.16 & Your IP : 216.73.216.52
Domains :
Cant Read [ /etc/named.conf ]
User : SISTEMA
Terminal
Auto Root
Create File
Create Folder
Localroot Suggester
Backdoor Destroyer
Readme
C: /
Windows /
System32 /
wbem /
Delete
Unzip
Name
Size
Permission
Date
Action
AutoRecover
[ DIR ]
drwxrwxrwx
2025-07-24 00:32
Logs
[ DIR ]
drwxrwxrwx
2024-02-15 05:13
MOF
[ DIR ]
drwxrwxrwx
2022-09-17 00:07
Performance
[ DIR ]
drwxrwxrwx
2025-07-09 08:26
Repository
[ DIR ]
drwxrwxrwx
2025-07-09 08:22
en
[ DIR ]
drwxrwxrwx
2023-03-23 12:54
en-US
[ DIR ]
drwxrwxrwx
2023-12-13 09:12
pt-BR
[ DIR ]
drwxrwxrwx
2023-12-13 09:12
tmf
[ DIR ]
drwxrwxrwx
2019-12-07 10:14
xml
[ DIR ]
drwxrwxrwx
2019-12-07 10:14
AgentWmi.mof
17.1
KB
-rw-rw-rw-
2019-12-07 15:56
AgentWmiUninstall.mof
693
B
-rw-rw-rw-
2019-12-07 10:10
AuditRsop.mof
1.68
KB
-rw-rw-rw-
2019-12-07 10:09
BthMtpEnum.mof
2.56
KB
-rw-rw-rw-
2019-12-07 10:10
CIWmi.mof
2.04
KB
-rw-rw-rw-
2019-12-07 10:10
DMWmiBridgeProv.dll
4.26
MB
-rw-rw-rw-
2025-05-14 02:03
DMWmiBridgeProv.mof
316.47
KB
-rw-rw-rw-
2024-08-14 15:28
DMWmiBridgeProv1.dll
1015.5
KB
-rw-rw-rw-
2025-05-14 02:03
DMWmiBridgeProv1.mof
36.87
KB
-rw-rw-rw-
2023-12-13 08:39
DMWmiBridgeProv1_Uninstall.mof
5.53
KB
-rw-rw-rw-
2022-09-18 10:13
DMWmiBridgeProv_Uninstall.mof
18.57
KB
-rw-rw-rw-
2021-10-06 15:33
DscCore.mof
34.23
KB
-rw-rw-rw-
2019-12-07 10:09
DscCoreConfProv.mof
6.52
KB
-rw-rw-rw-
2019-12-07 10:09
DscTimer.mof
1.63
KB
-rw-rw-rw-
2019-12-07 10:09
Dscpspluginwkr.dll
19
KB
-rw-rw-rw-
2019-12-07 10:09
EmbeddedLockdownWmi.dll
114.88
KB
-rw-rw-rw-
2024-05-16 16:43
EventTracingManagement.dll
108
KB
-rw-rw-rw-
2023-11-16 03:01
EventTracingManagement.mof
8.65
KB
-rw-rw-rw-
2019-12-07 10:09
FolderRedirectionWMIProvider.mof
8.79
KB
-rw-rw-rw-
2019-12-07 10:08
FunDisc.mof
702
B
-rw-rw-rw-
2019-12-07 10:08
IMAPIv2-Base.mof
31.36
KB
-rw-rw-rw-
2019-12-07 10:09
IMAPIv2-FileSystemSupport.mof
2.03
KB
-rw-rw-rw-
2019-12-07 10:09
IMAPIv2-LegacyShim.mof
759
B
-rw-rw-rw-
2019-12-07 10:09
IpmiDTrc.mof
638
B
-rw-rw-rw-
2019-12-07 10:08
IpmiPTrc.mof
763
B
-rw-rw-rw-
2019-12-07 10:08
KrnlProv.dll
73
KB
-rw-rw-rw-
2023-11-16 02:58
L2SecHC.mof
2.28
KB
-rw-rw-rw-
2019-12-07 10:08
MDMAppProv.dll
198.5
KB
-rw-rw-rw-
2025-05-14 02:03
MDMAppProv.mof
6.36
KB
-rw-rw-rw-
2019-12-07 10:08
MDMAppProv_Uninstall.mof
1.84
KB
-rw-rw-rw-
2019-12-07 10:08
MDMSettingsProv.dll
680
KB
-rw-rw-rw-
2025-06-10 19:43
MDMSettingsProv.mof
17.97
KB
-rw-rw-rw-
2019-12-07 10:08
MDMSettingsProv_Uninstall.mof
3.23
KB
-rw-rw-rw-
2019-12-07 10:08
MMFUtil.dll
22
KB
-rw-rw-rw-
2019-12-07 10:08
Microsoft-Windows-OfflineFiles.mof
1.73
KB
-rw-rw-rw-
2019-12-07 10:10
Microsoft-Windows-Remote-FileSystem.mof
776
B
-rw-rw-rw-
2019-12-07 10:09
Microsoft.AppV.AppVClientWmi.dll
31.98
KB
-rw-rw-rw-
2023-11-16 03:01
Microsoft.AppV.AppVClientWmi.mof
11.42
KB
-rw-rw-rw-
2019-12-07 15:56
Microsoft.Uev.AgentWmi.dll
1.49
MB
-rw-rw-rw-
2025-06-10 19:46
Microsoft.Uev.ManagedAgentWmi.mof
3.06
KB
-rw-rw-rw-
2019-12-07 10:10
Microsoft.Uev.ManagedAgentWmiUninstall.mof
514
B
-rw-rw-rw-
2019-12-07 10:10
MsDtcWmi.mof
21.02
KB
-rw-rw-rw-
2019-12-07 10:09
MsNetImPlatform.mof
42.72
KB
-rw-rw-rw-
2019-12-07 10:09
NCProv.dll
111.5
KB
-rw-rw-rw-
2024-06-13 15:19
NetAdapterCim.dll
668
KB
-rw-rw-rw-
2024-05-16 16:41
NetAdapterCim.mof
145.14
KB
-rw-rw-rw-
2019-12-07 10:08
NetAdapterCimTrace.mof
3.92
KB
-rw-rw-rw-
2019-12-07 10:08
NetAdapterCimTraceUninstall.mof
188
B
-rw-rw-rw-
2019-12-07 10:08
NetAdapterCim_uninstall.mof
10.6
KB
-rw-rw-rw-
2019-12-07 10:08
NetEventPacketCapture.dll
296
KB
-rw-rw-rw-
2025-05-14 02:05
NetEventPacketCapture.mof
15.45
KB
-rw-rw-rw-
2019-12-07 10:09
NetEventPacketCapture_uninstall.mof
2.19
KB
-rw-rw-rw-
2019-12-07 10:09
NetPeerDistCim.dll
1.46
MB
-rw-rw-rw-
2023-11-16 03:01
NetPeerDistCim.mof
27.92
KB
-rw-rw-rw-
2019-12-07 15:56
NetPeerDistCim_uninstall.mof
2.09
KB
-rw-rw-rw-
2019-12-07 10:10
NetSwitchTeam.mof
27.67
KB
-rw-rw-rw-
2019-12-07 10:09
NetTCPIP.dll
515
KB
-rw-rw-rw-
2024-12-11 09:43
NetTCPIP.mof
86.17
KB
-rw-rw-rw-
2019-12-07 10:08
NetTCPIP_Uninstall.mof
3.1
KB
-rw-rw-rw-
2019-12-07 10:08
OfflineFilesConfigurationWmiProvider.mof
5.43
KB
-rw-rw-rw-
2019-12-07 15:56
OfflineFilesConfigurationWmiProvider_Uninstall.mof
800
B
-rw-rw-rw-
2019-12-07 10:10
OfflineFilesWmiProvider.mof
14.25
KB
-rw-rw-rw-
2019-12-07 15:56
OfflineFilesWmiProvider_Uninstall.mof
2.11
KB
-rw-rw-rw-
2019-12-07 10:10
PNPXAssoc.mof
665
B
-rw-rw-rw-
2019-12-07 10:09
PS_MMAgent.mof
2.94
KB
-rw-rw-rw-
2019-12-07 10:09
PolicMan.dll
111
KB
-rw-rw-rw-
2019-12-07 15:56
PolicMan.mof
11.87
KB
-rw-rw-rw-
2019-12-07 15:56
PowerPolicyProvider.mof
26.68
KB
-rw-rw-rw-
2019-12-07 10:09
PrintFilterPipelineSvc.mof
2.54
KB
-rw-rw-rw-
2019-12-07 10:08
PrintManagementProvider.dll
257.5
KB
-rw-rw-rw-
2025-05-14 02:05
PrintManagementProvider.mof
16.43
KB
-rw-rw-rw-
2022-09-18 10:15
PrintManagementProvider_Uninstall.mof
2.42
KB
-rw-rw-rw-
2022-09-18 10:15
RacWmiProv.dll
74
KB
-rw-rw-rw-
2019-12-07 10:09
RacWmiProv.mof
2.96
KB
-rw-rw-rw-
2019-12-07 10:09
Remove.Microsoft.AppV.AppvClientWmi.mof
830
B
-rw-rw-rw-
2019-12-07 10:10
SMTPCons.dll
49
KB
-rw-rw-rw-
2019-12-07 10:08
SchedProv.mof
49.88
KB
-rw-rw-rw-
2019-12-07 10:09
SensorsClassExtension.mof
2.42
KB
-rw-rw-rw-
2019-12-07 10:08
ServDeps.dll
136
KB
-rw-rw-rw-
2023-11-16 02:58
ServiceModel.mof
86.31
KB
-rw-rw-rw-
2019-12-07 10:12
ServiceModel.mof.uninstall
896
B
-rw-rw-rw-
2019-12-07 10:12
ServiceModel35.mof
12.63
KB
-rw-rw-rw-
2019-12-07 10:10
ServiceModel35.mof.uninstall
684
B
-rw-rw-rw-
2019-12-07 10:10
SmbWitnessWmiv2Provider.mof
3.24
KB
-rw-rw-rw-
2019-12-07 10:08
UserProfileConfigurationWmiProvider.mof
18.34
KB
-rw-rw-rw-
2019-12-07 10:08
UserProfileWmiProvider.mof
19.39
KB
-rw-rw-rw-
2019-12-07 10:08
UserStateWMIProvider.mof
3.18
KB
-rw-rw-rw-
2019-12-07 10:08
WBEMCons.mof
18.14
KB
-rw-rw-rw-
2019-12-07 10:08
WFAPIGP.mof
1.07
KB
-rw-rw-rw-
2019-12-07 10:08
WFP.MOF
822
B
-rw-rw-rw-
2019-12-07 10:08
WLanHC.mof
1.28
KB
-rw-rw-rw-
2019-12-07 10:08
WMIADAP.exe
178
KB
-rwxrwxrwx
2024-06-13 15:19
WMIC.exe
563
KB
-rwxrwxrwx
2025-05-14 02:03
WMICOOKR.dll
92.5
KB
-rw-rw-rw-
2024-06-13 15:19
WMIPICMP.dll
145
KB
-rw-rw-rw-
2025-05-14 02:03
WMIPIPRT.dll
83.5
KB
-rw-rw-rw-
2019-12-07 10:08
WMIPJOBJ.dll
98.5
KB
-rw-rw-rw-
2019-12-07 10:08
WMIPSESS.dll
60
KB
-rw-rw-rw-
2019-12-07 10:08
WMI_Tracing.mof
1.64
KB
-rw-rw-rw-
2019-12-07 10:08
WMIsvc.dll
238
KB
-rw-rw-rw-
2024-06-13 15:19
WPDShServiceObj.mof
2.99
KB
-rw-rw-rw-
2019-12-07 10:10
WUDFx.mof
35.86
KB
-rw-rw-rw-
2019-12-07 10:08
WUDFxUninstall.mof
524
B
-rw-rw-rw-
2019-12-07 10:08
WdacEtwProv.mof
64.78
KB
-rw-rw-rw-
2019-12-07 10:09
WdacWmiProv.dll
143
KB
-rw-rw-rw-
2019-12-07 10:09
WdacWmiProv.mof
16.95
KB
-rw-rw-rw-
2019-12-07 10:09
WdacWmiProv_Uninstall.mof
1.07
KB
-rw-rw-rw-
2019-12-07 10:09
Wdf01000.mof
4.39
KB
-rw-rw-rw-
2019-12-07 10:08
Wdf01000Uninstall.mof
112
B
-rw-rw-rw-
2019-12-07 10:08
Win32_DeviceGuard.mof
3.3
KB
-rw-rw-rw-
2023-09-13 16:13
Win32_EncryptableVolume.dll
245
KB
-rw-rw-rw-
2025-07-09 07:55
Win32_EncryptableVolumeUninstall.mof
363
B
-rw-rw-rw-
2019-12-07 10:10
Win32_Tpm.dll
81
KB
-rw-rw-rw-
2025-07-09 07:54
Win32_Tpm.mof
24.04
KB
-rw-rw-rw-
2019-12-07 10:08
WinMgmt.exe
81
KB
-rwxrwxrwx
2024-06-13 15:19
WinMgmtR.dll
33
KB
-rw-rw-rw-
2024-06-13 15:19
Winsat.mof
1.51
KB
-rw-rw-rw-
2019-12-07 10:09
WinsatUninstall.mof
487
B
-rw-rw-rw-
2019-12-07 10:09
WmiApRes.dll
2.5
KB
-rw-rw-rw-
2024-06-13 15:19
WmiApRpl.dll
137.5
KB
-rw-rw-rw-
2024-06-13 15:19
WmiApSrv.exe
205
KB
-rwxrwxrwx
2024-06-13 15:19
WmiDcPrv.dll
189.5
KB
-rw-rw-rw-
2023-11-16 02:59
WmiPerfClass.dll
137.5
KB
-rw-rw-rw-
2019-12-07 10:09
WmiPerfClass.mof
980
B
-rw-rw-rw-
2019-12-07 10:09
WmiPerfInst.dll
65
KB
-rw-rw-rw-
2019-12-07 10:09
WmiPerfInst.mof
804
B
-rw-rw-rw-
2019-12-07 10:09
WmiPrvSD.dll
838
KB
-rw-rw-rw-
2023-11-16 02:59
WmiPrvSE.exe
485
KB
-rwxrwxrwx
2023-11-16 02:59
WsmAgent.mof
822
B
-rw-rw-rw-
2019-12-07 10:08
WsmAgentUninstall.mof
754
B
-rw-rw-rw-
2019-12-07 10:08
WsmAuto.mof
4.42
KB
-rw-rw-rw-
2019-12-07 10:08
Wudfx02000.mof
3.49
KB
-rw-rw-rw-
2019-12-07 10:08
Wudfx02000Uninstall.mof
122
B
-rw-rw-rw-
2019-12-07 10:08
aeinv.mof
2.79
KB
-rw-rw-rw-
2019-12-07 10:08
appbackgroundtask.dll
39.5
KB
-rw-rw-rw-
2019-12-07 10:08
appbackgroundtask.mof
2.83
KB
-rw-rw-rw-
2019-12-07 10:08
appbackgroundtask_uninstall.mof
852
B
-rw-rw-rw-
2019-12-07 10:08
authfwcfg.mof
1.07
KB
-rw-rw-rw-
2019-12-07 10:09
bcd.mof
11.84
KB
-rw-rw-rw-
2019-12-07 10:08
cimdmtf.mof
157.39
KB
-rw-rw-rw-
2019-12-07 10:09
cimwin32.dll
2.01
MB
-rw-rw-rw-
2025-05-14 02:04
cimwin32.mof
2.59
MB
-rw-rw-rw-
2019-12-07 10:08
classlog.mof
4.85
KB
-rw-rw-rw-
2019-12-07 10:08
cli.mof
31.86
KB
-rw-rw-rw-
2019-12-07 10:08
cliegaliases.mof
2.68
MB
-rw-rw-rw-
2019-12-07 10:08
ddp.mof
2.64
KB
-rw-rw-rw-
2019-12-07 10:10
dimsjob.mof
1.21
KB
-rw-rw-rw-
2019-12-07 10:09
dimsroam.mof
1.25
KB
-rw-rw-rw-
2019-12-07 10:09
dnsclientcim.dll
123.5
KB
-rw-rw-rw-
2019-12-07 10:09
dnsclientcim.mof
61.98
KB
-rw-rw-rw-
2019-12-07 10:09
dnsclientpsprovider.dll
187.5
KB
-rw-rw-rw-
2019-12-07 10:09
dnsclientpsprovider.mof
14.3
KB
-rw-rw-rw-
2019-12-07 10:09
dnsclientpsprovider_Uninstall.mof
1.25
KB
-rw-rw-rw-
2019-12-07 10:09
drvinst.mof
3.6
KB
-rw-rw-rw-
2019-12-07 10:09
dscproxy.mof
1.12
KB
-rw-rw-rw-
2019-12-07 10:09
dsprov.dll
195.5
KB
-rw-rw-rw-
2025-05-14 02:03
dsprov.mof
18.02
KB
-rw-rw-rw-
2019-12-07 10:08
eaimeapi.mof
1.27
KB
-rw-rw-rw-
2019-12-07 10:09
embeddedlockdownwmi.mof
1.48
KB
-rw-rw-rw-
2019-12-07 10:10
embeddedlockdownwmi_Uninstall.mof
720
B
-rw-rw-rw-
2019-12-07 10:10
esscli.dll
480
KB
-rw-rw-rw-
2024-06-13 15:19
fastprox.dll
1.03
MB
-rw-rw-rw-
2025-05-14 02:03
fdPHost.mof
719
B
-rw-rw-rw-
2019-12-07 10:08
fdSSDP.mof
656
B
-rw-rw-rw-
2019-12-07 10:09
fdWNet.mof
716
B
-rw-rw-rw-
2019-12-07 10:08
fdWSD.mof
656
B
-rw-rw-rw-
2019-12-07 10:09
fdrespub.mof
736
B
-rw-rw-rw-
2019-12-07 10:08
filetrace.mof
16.64
KB
-rw-rw-rw-
2019-12-07 10:08
firewallapi.mof
1.88
KB
-rw-rw-rw-
2019-12-07 10:08
fwcfg.mof
1.06
KB
-rw-rw-rw-
2019-12-07 10:09
hbaapi.mof
471.2
KB
-rw-rw-rw-
2019-12-07 10:09
hnetcfg.mof
8.41
KB
-rw-rw-rw-
2019-12-07 10:09
interop.mof
37.14
KB
-rw-rw-rw-
2019-12-07 10:08
ipmiprr.dll
3.5
KB
-rw-rw-rw-
2019-12-07 10:08
ipmiprv.dll
204.5
KB
-rw-rw-rw-
2019-12-07 10:08
ipmiprv.mof
207.81
KB
-rw-rw-rw-
2019-12-07 10:08
ipsecsvc.mof
1.25
KB
-rw-rw-rw-
2019-12-07 10:08
iscsidsc.mof
19.41
KB
-rw-rw-rw-
2019-12-07 10:09
iscsihba.mof
111.33
KB
-rw-rw-rw-
2019-12-07 10:09
iscsiprf.mof
44.96
KB
-rw-rw-rw-
2019-12-07 10:09
iscsirem.mof
4.4
KB
-rw-rw-rw-
2019-12-07 10:09
iscsiwmiv2.mof
36.29
KB
-rw-rw-rw-
2019-12-07 10:09
iscsiwmiv2_uninstall.mof
2.71
KB
-rw-rw-rw-
2019-12-07 10:09
kerberos.mof
8.55
KB
-rw-rw-rw-
2019-12-07 10:09
krnlprov.mof
14.49
KB
-rw-rw-rw-
2019-12-07 10:08
lltdio.mof
1.21
KB
-rw-rw-rw-
2019-12-07 10:08
lltdsvc.mof
1.65
KB
-rw-rw-rw-
2019-12-07 10:08
lsasrv.mof
13.46
KB
-rw-rw-rw-
2019-12-07 10:09
mblctr.mof
2.95
KB
-rw-rw-rw-
2019-12-07 10:09
mispace.mof
1.04
MB
-rw-rw-rw-
2019-12-07 10:09
mispace_uninstall.mof
9.12
KB
-rw-rw-rw-
2019-12-07 10:09
mmc.mof
698
B
-rw-rw-rw-
2019-12-07 10:09
mofcomp.exe
32
KB
-rwxrwxrwx
2024-06-13 15:19
mofd.dll
259.5
KB
-rw-rw-rw-
2024-06-13 15:19
mofinstall.dll
88.5
KB
-rw-rw-rw-
2023-11-16 02:58
mountmgr.mof
1.67
KB
-rw-rw-rw-
2019-12-07 10:08
mpeval.mof
14.08
KB
-rw-rw-rw-
2019-12-07 10:09
mpsdrv.mof
1.07
KB
-rw-rw-rw-
2019-12-07 10:08
mpssvc.mof
1.87
KB
-rw-rw-rw-
2019-12-07 10:08
msdtcwmi.dll
209
KB
-rw-rw-rw-
2025-05-14 02:05
msfeeds.mof
1.48
KB
-rw-rw-rw-
2019-12-07 10:09
msfeedsbs.mof
1.54
KB
-rw-rw-rw-
2019-12-07 10:09
msi.mof
168.56
KB
-rw-rw-rw-
2019-12-07 10:08
msiprov.dll
424
KB
-rw-rw-rw-
2025-05-14 02:03
msiscsi.mof
4.69
KB
-rw-rw-rw-
2019-12-07 10:09
mstsc.mof
1.17
KB
-rw-rw-rw-
2019-12-07 10:09
mstscax.mof
2.01
KB
-rw-rw-rw-
2019-12-07 10:09
msv1_0.mof
7.54
KB
-rw-rw-rw-
2019-12-07 10:09
mswmdm.mof
1.67
KB
-rw-rw-rw-
2019-12-07 10:10
ncprov.mof
2.89
KB
-rw-rw-rw-
2019-12-07 10:08
ncsi.mof
1.1
KB
-rw-rw-rw-
2019-12-07 10:09
ndisimplatcim.dll
258
KB
-rw-rw-rw-
2024-05-16 16:41
ndistrace.mof
3.82
KB
-rw-rw-rw-
2019-12-07 10:08
netdacim.dll
83
KB
-rw-rw-rw-
2019-12-07 10:09
netdacim.mof
7.2
KB
-rw-rw-rw-
2019-12-07 10:09
netdacim_uninstall.mof
1.72
KB
-rw-rw-rw-
2019-12-07 10:09
netnccim.dll
43.5
KB
-rw-rw-rw-
2019-12-07 10:09
netnccim.mof
4.51
KB
-rw-rw-rw-
2019-12-07 10:09
netnccim_uninstall.mof
1.12
KB
-rw-rw-rw-
2019-12-07 10:09
netprofm.mof
1.09
KB
-rw-rw-rw-
2019-12-07 10:09
netswitchteamcim.dll
175
KB
-rw-rw-rw-
2024-05-16 16:41
netttcim.dll
262
KB
-rw-rw-rw-
2019-12-07 10:09
netttcim.mof
58.83
KB
-rw-rw-rw-
2019-12-07 10:09
netttcim_uninstall.mof
2.54
KB
-rw-rw-rw-
2019-12-07 10:09
networkitemfactory.mof
683
B
-rw-rw-rw-
2019-12-07 10:08
newdev.mof
3.59
KB
-rw-rw-rw-
2019-12-07 10:09
nlasvc.mof
3.74
KB
-rw-rw-rw-
2019-12-07 10:09
nlmcim.dll
69
KB
-rw-rw-rw-
2025-05-14 02:04
nlmcim.mof
1.73
KB
-rw-rw-rw-
2022-12-14 11:23
nlmcim_uninstall.mof
656
B
-rw-rw-rw-
2019-12-07 10:09
nlsvc.mof
2.81
KB
-rw-rw-rw-
2019-12-07 10:09
npivwmi.mof
31.5
KB
-rw-rw-rw-
2019-12-07 10:09
nshipsec.mof
1.24
KB
-rw-rw-rw-
2019-12-07 10:08
ntevt.dll
280.5
KB
-rw-rw-rw-
2025-05-14 02:03
ntevt.mof
43.24
KB
-rw-rw-rw-
2019-12-07 10:08
ntfs.mof
308
B
-rw-rw-rw-
2019-12-07 10:08
p2p-mesh.mof
2.32
KB
-rw-rw-rw-
2019-12-07 10:09
p2p-pnrp.mof
2.24
KB
-rw-rw-rw-
2019-12-07 10:09
pcsvDevice.mof
72.75
KB
-rw-rw-rw-
2019-12-07 10:08
pcsvDevice_Uninstall.mof
1.2
KB
-rw-rw-rw-
2019-12-07 10:08
polproc.mof
9.23
KB
-rw-rw-rw-
2019-12-07 15:56
polprocl.mof
29.08
KB
-rw-rw-rw-
2019-12-07 15:56
polprou.mof
10.69
KB
-rw-rw-rw-
2019-12-07 15:56
polstore.mof
1.25
KB
-rw-rw-rw-
2019-12-07 10:08
portabledeviceapi.mof
4.2
KB
-rw-rw-rw-
2019-12-07 15:56
portabledeviceclassextension.mof
3.13
KB
-rw-rw-rw-
2019-12-07 10:10
portabledeviceconnectapi.mof
1.74
KB
-rw-rw-rw-
2019-12-07 10:10
portabledevicetypes.mof
3.41
KB
-rw-rw-rw-
2019-12-07 10:10
portabledevicewiacompat.mof
1.72
KB
-rw-rw-rw-
2019-12-07 10:10
powermeterprovider.mof
12.51
KB
-rw-rw-rw-
2019-12-07 10:09
ppcRsopCompSchema.mof
1.95
KB
-rw-rw-rw-
2019-12-07 10:08
ppcRsopUserSchema.mof
1.94
KB
-rw-rw-rw-
2019-12-07 10:08
profileassociationprovider.mof
12.72
KB
-rw-rw-rw-
2019-12-07 10:09
qmgr.mof
2.25
KB
-rw-rw-rw-
2019-12-07 10:08
qoswmi.dll
131
KB
-rw-rw-rw-
2025-05-14 02:04
qoswmi.mof
6.42
KB
-rw-rw-rw-
2019-12-07 10:09
qoswmi_uninstall.mof
746
B
-rw-rw-rw-
2019-12-07 10:09
qoswmitrc.mof
1.54
KB
-rw-rw-rw-
2019-12-07 10:09
qoswmitrc_uninstall.mof
172
B
-rw-rw-rw-
2019-12-07 10:09
rawxml.xsl
623
B
-rw-rw-rw-
2019-12-07 10:08
rdpendp.mof
1.1
KB
-rw-rw-rw-
2019-12-07 10:09
rdpinit.mof
1.17
KB
-rw-rw-rw-
2019-12-07 10:10
rdpshell.mof
1.17
KB
-rw-rw-rw-
2019-12-07 10:10
refs.mof
2.12
KB
-rw-rw-rw-
2019-12-07 10:08
refsv1.mof
2.94
KB
-rw-rw-rw-
2019-12-07 10:08
regevent.mof
109.08
KB
-rw-rw-rw-
2019-12-07 10:08
repdrvfs.dll
427.5
KB
-rw-rw-rw-
2025-05-14 02:03
rsop.mof
102.95
KB
-rw-rw-rw-
2019-12-07 10:08
rspndr.mof
2.17
KB
-rw-rw-rw-
2019-12-07 10:08
samsrv.mof
61.08
KB
-rw-rw-rw-
2019-12-07 10:09
scersop.mof
8.12
KB
-rw-rw-rw-
2019-12-07 10:09
schannel.mof
1.05
KB
-rw-rw-rw-
2019-12-07 10:09
schedprov.dll
337
KB
-rw-rw-rw-
2023-11-16 02:59
scm.mof
19.31
KB
-rw-rw-rw-
2019-12-07 10:09
scrcons.exe
51.5
KB
-rwxrwxrwx
2019-12-07 10:08
scrcons.mof
5.61
KB
-rw-rw-rw-
2019-12-07 10:08
sdbus.mof
3.68
KB
-rw-rw-rw-
2019-12-07 10:08
secrcw32.mof
62.78
KB
-rw-rw-rw-
2019-12-07 10:08
services.mof
2.8
KB
-rw-rw-rw-
2019-12-07 10:09
setupapi.mof
3.6
KB
-rw-rw-rw-
2019-12-07 10:09
smbwmiv2.mof
21.67
KB
-rw-rw-rw-
2021-10-06 15:33
smtpcons.mof
4.18
KB
-rw-rw-rw-
2019-12-07 10:08
sppwmi.mof
65.11
KB
-rw-rw-rw-
2019-12-07 10:08
sr.mof
3.79
KB
-rw-rw-rw-
2019-12-07 10:09
sstpsvc.mof
2.54
KB
-rw-rw-rw-
2019-12-07 10:09
stdprov.dll
141.5
KB
-rw-rw-rw-
2019-12-07 10:08
storagewmi.mof
329.9
KB
-rw-rw-rw-
2019-12-07 10:09
storagewmi_passthru.mof
1.85
KB
-rw-rw-rw-
2019-12-07 10:09
storagewmi_passthru_uninstall.mof
1.61
KB
-rw-rw-rw-
2019-12-07 10:09
storagewmi_uninstall.mof
13.16
KB
-rw-rw-rw-
2019-12-07 10:09
stortrace.mof
17.52
KB
-rw-rw-rw-
2019-12-07 10:08
subscrpt.mof
668
B
-rw-rw-rw-
2019-12-07 10:08
system.mof
123.95
KB
-rw-rw-rw-
2019-12-07 10:08
tcpip.mof
2.99
KB
-rw-rw-rw-
2019-12-07 10:09
texttable.xsl
6.13
KB
-rw-rw-rw-
2019-12-07 10:08
textvaluelist.xsl
2.7
KB
-rw-rw-rw-
2019-12-07 10:08
tsallow.mof
16.67
KB
-rw-rw-rw-
2019-12-07 15:56
tscfgwmi.mof
65.83
KB
-rw-rw-rw-
2019-12-07 15:56
tsmf.mof
1.21
KB
-rw-rw-rw-
2019-12-07 10:09
tspkg.mof
1.04
KB
-rw-rw-rw-
2019-12-07 10:09
umb.mof
646
B
-rw-rw-rw-
2019-12-07 10:09
umbus.mof
2.4
KB
-rw-rw-rw-
2019-12-07 10:09
umpass.mof
2.4
KB
-rw-rw-rw-
2019-12-07 10:09
umpnpmgr.mof
3.61
KB
-rw-rw-rw-
2019-12-07 10:09
unsecapp.exe
53
KB
-rwxrwxrwx
2024-06-13 15:19
vds.mof
59.63
KB
-rw-rw-rw-
2019-12-07 10:08
vdswmi.dll
233
KB
-rw-rw-rw-
2019-12-07 10:08
viewprov.dll
210
KB
-rw-rw-rw-
2025-05-14 02:03
vpnclientpsprovider.dll
624
KB
-rw-rw-rw-
2024-03-13 07:54
vpnclientpsprovider.mof
45.96
KB
-rw-rw-rw-
2019-12-07 10:09
vpnclientpsprovider_Uninstall.mof
3.58
KB
-rw-rw-rw-
2019-12-07 10:09
vss.mof
59.05
KB
-rw-rw-rw-
2019-12-07 10:09
vsswmi.dll
150
KB
-rw-rw-rw-
2019-12-07 10:09
wbemcntl.dll
350
KB
-rw-rw-rw-
2023-11-16 02:58
wbemcons.dll
75
KB
-rw-rw-rw-
2019-12-07 10:08
wbemcore.dll
1.86
MB
-rw-rw-rw-
2025-05-14 02:03
wbemdisp.dll
291.5
KB
-rw-rw-rw-
2019-12-07 10:08
wbemdisp.tlb
58.5
KB
-rw-rw-rw-
2019-12-07 10:08
wbemess.dll
502.5
KB
-rw-rw-rw-
2019-12-07 10:08
wbemprox.dll
45
KB
-rw-rw-rw-
2024-06-13 15:19
wbemsvc.dll
62
KB
-rw-rw-rw-
2024-06-13 15:19
wbemtest.exe
214.5
KB
-rwxrwxrwx
2019-12-07 10:08
wcncsvc.mof
3.71
KB
-rw-rw-rw-
2019-12-07 10:08
wdigest.mof
1.08
KB
-rw-rw-rw-
2019-12-07 10:09
wfascim.dll
892.5
KB
-rw-rw-rw-
2023-11-16 02:59
wfascim.mof
263.86
KB
-rw-rw-rw-
2023-05-10 07:48
wfascim_uninstall.mof
6.71
KB
-rw-rw-rw-
2022-09-18 10:14
wfs.mof
2.09
KB
-rw-rw-rw-
2019-12-06 20:55
whqlprov.mof
3.88
KB
-rw-rw-rw-
2019-12-07 10:09
win32_encryptablevolume.mof
19.63
KB
-rw-rw-rw-
2019-12-07 15:56
win32_printer.mof
95
KB
-rw-rw-rw-
2019-12-07 10:08
wininit.mof
1.71
KB
-rw-rw-rw-
2019-12-07 10:08
winipsec.mof
1.24
KB
-rw-rw-rw-
2019-12-07 10:08
winlogon.mof
3.12
KB
-rw-rw-rw-
2019-12-07 10:08
wlan.mof
12.58
KB
-rw-rw-rw-
2019-12-07 10:08
wmi.mof
11.8
KB
-rw-rw-rw-
2019-12-07 10:08
wmipcima.dll
172
KB
-rw-rw-rw-
2023-11-16 02:58
wmipcima.mof
41.01
KB
-rw-rw-rw-
2019-12-07 10:08
wmipdfs.dll
63.5
KB
-rw-rw-rw-
2019-12-07 10:08
wmipdfs.mof
14.45
KB
-rw-rw-rw-
2019-12-07 10:08
wmipdskq.dll
124
KB
-rw-rw-rw-
2023-11-16 02:58
wmipdskq.mof
13.2
KB
-rw-rw-rw-
2019-12-07 10:08
wmipicmp.mof
19.87
KB
-rw-rw-rw-
2019-12-07 10:08
wmipiprt.mof
23.61
KB
-rw-rw-rw-
2019-12-07 10:08
wmipjobj.mof
60.01
KB
-rw-rw-rw-
2019-12-07 10:08
wmiprov.dll
221
KB
-rw-rw-rw-
2024-06-13 15:19
wmipsess.mof
13.72
KB
-rw-rw-rw-
2019-12-07 10:08
wmitimep.dll
59.5
KB
-rw-rw-rw-
2019-12-07 10:08
wmitimep.mof
6.44
KB
-rw-rw-rw-
2019-12-07 10:08
wmiutils.dll
135.5
KB
-rw-rw-rw-
2024-06-13 15:19
wmp.mof
4.77
KB
-rw-rw-rw-
2019-10-15 15:46
wmpnetwk.mof
4.68
KB
-rw-rw-rw-
2019-10-15 15:49
wpd_ci.mof
2.94
KB
-rw-rw-rw-
2019-12-07 10:10
wpdbusenum.mof
2.74
KB
-rw-rw-rw-
2019-12-07 10:10
wpdcomp.mof
2.75
KB
-rw-rw-rw-
2019-12-07 10:10
wpdfs.mof
2.68
KB
-rw-rw-rw-
2019-12-07 10:10
wpdmtp.mof
3.27
KB
-rw-rw-rw-
2019-12-07 10:10
wpdshext.mof
3.24
KB
-rw-rw-rw-
2019-12-07 10:10
wpdsp.mof
2.92
KB
-rw-rw-rw-
2019-12-07 10:10
wscenter.mof
5.81
KB
-rw-rw-rw-
2023-03-15 03:02
wsp_fs.mof
548.78
KB
-rw-rw-rw-
2019-12-07 10:09
wsp_fs_uninstall.mof
2.71
KB
-rw-rw-rw-
2019-12-07 10:09
wsp_health.mof
554.91
KB
-rw-rw-rw-
2019-12-07 10:09
wsp_health_uninstall.mof
2.31
KB
-rw-rw-rw-
2019-12-07 10:09
wsp_sr.mof
592.55
KB
-rw-rw-rw-
2019-12-07 10:09
wsp_sr_uninstall.mof
3.38
KB
-rw-rw-rw-
2019-12-07 10:09
xsl-mappings.xml
2.8
KB
-rw-rw-rw-
2019-12-07 10:08
xwizards.mof
2.15
KB
-rw-rw-rw-
2019-12-07 10:09
Save
Rename
// � 2000 Microsoft Corporation. All rights reserved. #pragma autorecover #pragma namespace ("\\\\.\\root\\cimv2") ///////////////////////////////////////////////////////////////////////////// // Base classes for SCM events class MSFT_SCMEvent : __ExtrinsicEvent { }; // Base class for events destined for the system Event Log. class MSFT_SCMEventLogEvent : MSFT_SCMEvent { }; ///////////////////////////////////////////////////////////////////////////// // Net events // // MessageId: EVENT_BAD_ACCOUNT_NAME // // MessageText: // // No backslash is in the account name. // [ EventId(0xC0001B60) : ToInstance, EventType(1) : ToInstance ] class MSFT_NetBadAccount : MSFT_SCMEventLogEvent { }; // // MessageId: EVENT_CALL_TO_FUNCTION_FAILED // // MessageText: // // The %1 call failed with the following error: %n%2 // [ EventId(0xC0001B5D) : ToInstance, EventType(1) : ToInstance, InsertionStringTemplates {"%FunctionName%", "%%%%%Error%"} : ToInstance ] class MSFT_NetCallToFunctionFailed : MSFT_SCMEventLogEvent { string FunctionName; uint32 Error; }; // // MessageId: EVENT_CALL_TO_FUNCTION_FAILED_II // // MessageText: // // The %1 call failed for %2 with the following error: %n%3 // [ EventId(0xC0001B5E) : ToInstance, EventType(1) : ToInstance, InsertionStringTemplates {"%FunctionName%", "%Argument%", "%%%%%Error%"} : ToInstance ] class MSFT_NetCallToFunctionFailedII : MSFT_SCMEventLogEvent { string FunctionName; string Argument; uint32 Error; }; // // MessageId: EVENT_FIRST_LOGON_FAILED // // MessageText: // // Logon attempt with current password failed with the following error: %n%1 // [ EventId(0xC0001B65) : ToInstance, EventType(1) : ToInstance, InsertionStringTemplates {"%%%%%Error%"} : ToInstance ] class MSFT_NetFirstLogonFailed : MSFT_SCMEventLogEvent { uint32 Error; }; // // MessageId: EVENT_REVERTED_TO_LASTKNOWNGOOD // // MessageText: // // The system reverted to its last known good configuration. The system is restarting.... // [ EventId(0xC0001B5F) : ToInstance, EventType(1) : ToInstance ] class MSFT_NetRevertedToLastKnownGood : MSFT_SCMEventLogEvent { }; // // MessageId: EVENT_CONNECTION_TIMEOUT // // MessageText: // // Timeout (%1 milliseconds) waiting for the %2 service to connect. // [ EventId(0xC0001B61) : ToInstance, EventType(1) : ToInstance, InsertionStringTemplates {"%Milliseconds%", "%Service%"} : ToInstance ] class MSFT_NetConnectionTimeout : MSFT_SCMEventLogEvent { uint32 Milliseconds; string Service; }; // // MessageId: EVENT_READFILE_TIMEOUT // // MessageText: // // Timeout (%1 milliseconds) waiting for ReadFile. // [ EventId(0xC0001B62) : ToInstance, EventType(1) : ToInstance, InsertionStringTemplates {"%Milliseconds%"} : ToInstance ] class MSFT_NetReadfileTimeout : MSFT_SCMEventLogEvent { uint32 Milliseconds; }; // // MessageId: EVENT_TRANSACT_TIMEOUT // // MessageText: // // Timeout (%1 milliseconds) waiting for a transaction response from the %2 service. // [ EventId(0xC0001B63) : ToInstance, EventType(1) : ToInstance, InsertionStringTemplates {"%Milliseconds%", "%Service%"} : ToInstance ] class MSFT_NetTransactTimeout : MSFT_SCMEventLogEvent { uint32 Milliseconds; string Service; }; // // MessageId: EVENT_TRANSACT_INVALID // // MessageText: // // Message returned in transaction has incorrect size. // [ EventId(0xC0001B64) : ToInstance, EventType(1) : ToInstance ] class MSFT_NetTransactInvalid : MSFT_SCMEventLogEvent { }; // // Parameter %4 is the value, in decimal, of the SC_ACTION_ constant for // the action described in parameter %5. // // // MessageId: EVENT_SERVICE_CRASH // // MessageText: // // The %1 service terminated unexpectedly. It has done this %2 time(s). The following corrective action will be taken in %3 milliseconds: %5. // [ EventId(0xC0001B77) : ToInstance, EventType(1) : ToInstance, InsertionStringTemplates {"%Service%", "%TimesFailed%", "%ActionDelay%", "%ActionType%", "%Action%"} : ToInstance ] class MSFT_NetServiceCrash : MSFT_SCMEventLogEvent { string Service; uint32 TimesFailed; uint32 ActionDelay; uint32 ActionType; string Action; }; // // MessageId: EVENT_SERVICE_CRASH_NO_ACTION // // MessageText: // // The %1 service terminated unexpectedly. It has done this %2 time(s). // [ EventId(0xC0001B7A) : ToInstance, EventType(1) : ToInstance, InsertionStringTemplates {"%Service%", "%TimesFailed%" } : ToInstance ] class MSFT_NetServiceCrashNoAction : MSFT_SCMEventLogEvent { string Service; uint32 TimesFailed; }; // // MessageId: EVENT_SERVICE_NOT_INTERACTIVE // // MessageText: // // The %1 service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly. // [ EventId(0xC0001B76) : ToInstance, EventType(1) : ToInstance, InsertionStringTemplates {"%Service%"} : ToInstance ] class MSFT_NetServiceNotInteractive : MSFT_SCMEventLogEvent { string Service; }; // // Parameter %1 is the value, in decimal, of the SC_ACTION_ constant for // the action described in parameter %2. // // // MessageId: EVENT_SERVICE_RECOVERY_FAILED // // MessageText: // // The Service Control Manager tried to take a corrective action (%2) after the unexpected termination of the %3 service, but this action failed with the following error: %n%4 // [ EventId(0xC0001B78) : ToInstance, EventType(1) : ToInstance, InsertionStringTemplates {"%ActionType%", "%Action%", "%Service%", "%%%%%Error%"} : ToInstance ] class MSFT_NetServiceRecoveryFailed : MSFT_SCMEventLogEvent { uint32 ActionType; string Action; string Service; uint32 Error; }; // // MessageId: EVENT_SERVICE_START_FAILED // // MessageText: // // The %1 service failed to start due to the following error: %n%2 // [ EventId(0xC0001B58) : ToInstance, EventType(1) : ToInstance, InsertionStringTemplates {"%Service%", "%%%%%Error%"} : ToInstance ] class MSFT_NetServiceStartFailed : MSFT_SCMEventLogEvent { string Service; uint32 Error; }; // // MessageId: EVENT_SERVICE_START_FAILED_II // // MessageText: // // The %1 service depends on the %2 service which failed to start because // of the following error: %n%3 // [ EventId(0xC0001B59) : ToInstance, EventType(1) : ToInstance, InsertionStringTemplates {"%Service%", "%DependedOnService%", "%%%%%Error%"} : ToInstance ] class MSFT_NetServiceStartFailedII : MSFT_SCMEventLogEvent { string Service; string DependedOnService; uint32 Error; }; // // MessageId: EVENT_CIRCULAR_DEPENDENCY_DEMAND // // MessageText: // // Detected circular dependencies demand starting %1. // [ EventId(0xC0001B69) : ToInstance, EventType(1) : ToInstance, InsertionStringTemplates {"%Service%"} : ToInstance ] class MSFT_NetCircularDependencyDemand : MSFT_SCMEventLogEvent { string Service; }; // // MessageId: EVENT_CIRCULAR_DEPENDENCY_AUTO // // MessageText: // // Detected circular dependencies auto-starting services. // [ EventId(0xC0001B6A) : ToInstance, EventType(1) : ToInstance ] class MSFT_NetCircularDependencyAuto : MSFT_SCMEventLogEvent { }; // // MessageId: EVENT_SERVICE_START_FAILED_NONE // // MessageText: // // The %1 service depends on the following nonexistent service: %2 // [ EventId(0xC0001B5B) : ToInstance, EventType(1) : ToInstance, InsertionStringTemplates {"%Service%", "%NonExistingService%"} : ToInstance ] class MSFT_NetServiceStartFailedNone : MSFT_SCMEventLogEvent { string Service; string NonExistingService; }; // // MessageId: EVENT_DEPEND_ON_LATER_SERVICE // // MessageText: // // Circular dependency: The %1 service depends on a service in a group which starts later. // [ EventId(0xC0001B6B) : ToInstance, EventType(1) : ToInstance, InsertionStringTemplates {"%Service%"} : ToInstance ] class MSFT_NetDependOnLaterService : MSFT_SCMEventLogEvent { string Service; }; // // MessageId: EVENT_SERVICE_START_FAILED_GROUP // // MessageText: // // The %1 service depends on the %2 group and no member of this group started. // [ EventId(0xC0001B5A) : ToInstance, EventType(1) : ToInstance, InsertionStringTemplates {"%Service%", "%Group%"} : ToInstance ] class MSFT_NetServiceStartFailedGroup : MSFT_SCMEventLogEvent { string Service; string Group; }; // // MessageId: EVENT_DEPEND_ON_LATER_SERVICE // // MessageText: // // Circular dependency: The %1 service depends on a service in a group which starts later. // [ EventId(0xC0001B6B) : ToInstance, EventType(1) : ToInstance, InsertionStringTemplates {"%Service%"} : ToInstance ] class MSFT_NetDependOnLaterGroup : MSFT_SCMEventLogEvent { string Service; }; // // MessageId: EVENT_SERVICE_START_HUNG // // MessageText: // // The %1 service hung on starting. // [ EventId(0xC0001B6E) : ToInstance, EventType(1) : ToInstance, InsertionStringTemplates {"%Service%"} : ToInstance ] class MSFT_NetServiceStartHung : MSFT_SCMEventLogEvent { string Service; }; // // MessageId: EVENT_SEVERE_SERVICE_FAILED // // MessageText: // // About to revert to the last known good configuration because the %1 service failed to start. // [ EventId(0xC0001B6D) : ToInstance, EventType(1) : ToInstance, InsertionStringTemplates {"%Service%"} : ToInstance ] class MSFT_NetSevereServiceFailed : MSFT_SCMEventLogEvent { string Service; }; // // MessageId: EVENT_TAKE_OWNERSHIP // // MessageText: // // The %1 Registry key denied access to SYSTEM account programs so the Service Control Manager took ownership of the Registry key. // [ EventId(0xC0001B74) : ToInstance, EventType(1) : ToInstance, InsertionStringTemplates {"%RegistryKey%"} : ToInstance ] class MSFT_NetTakeOwnership : MSFT_SCMEventLogEvent { string RegistryKey; }; // // MessageId: EVENT_BAD_SERVICE_STATE // // MessageText: // // The %1 service has reported an invalid current state %2. // [ EventId(0xC0001B68) : ToInstance, EventType(1) : ToInstance, InsertionStringTemplates {"%Service%", "%State%"} : ToInstance ] class MSFT_NetBadServiceState : MSFT_SCMEventLogEvent { string Service; uint32 State; }; // // MessageId: EVENT_SERVICE_EXIT_FAILED // // MessageText: // // The %1 service terminated with the following error: %n%2 // [ EventId(0xC0001B6F) : ToInstance, EventType(1) : ToInstance, InsertionStringTemplates {"%Service%", "%%%%%Error%"} : ToInstance ] class MSFT_NetServiceExitFailed : MSFT_SCMEventLogEvent { string Service; uint32 Error; }; // // MessageId: EVENT_SERVICE_EXIT_FAILED_SPECIFIC // // MessageText: // // The %1 service terminated with service-specific error %2. // [ EventId(0xC0001B70) : ToInstance, EventType(1) : ToInstance, InsertionStringTemplates {"%Service%", "%Error% (%Error(0x%X)%)"} : ToInstance ] class MSFT_NetServiceExitFailedSpecific : MSFT_SCMEventLogEvent { string Service; uint32 Error; }; // // MessageId: EVENT_BOOT_SYSTEM_DRIVERS_STOPPED // // MessageText: // // The following boot-start or system-start driver(s) did not load: %1 // [ EventId(0xC0001B72) : ToInstance, EventType(1) : ToInstance, InsertionStringTemplates {"%DriverList%"} : ToInstance ] class MSFT_NetBootSystemDriversFailed : MSFT_SCMEventLogEvent { string DriverList; }; // // MessageId: EVENT_SERVICE_CONTROL_SUCCESS // // MessageText: // // The %1 service was successfully sent a %2 control. // [ EventId(0x40001B7B) : ToInstance, EventType(4) : ToInstance, InsertionStringTemplates {"%Service%", "%Control%"} : ToInstance ] class MSFT_NetServiceControlSuccess : MSFT_SCMEventLogEvent { string Service; string Control; string sid; }; // // MessageId: EVENT_SERVICE_STATUS_SUCCESS // // MessageText: // // The %1 service entered the %2 state. // [ EventId(0x40001B7C) : ToInstance, EventType(4) : ToInstance, InsertionStringTemplates {"%Service%", "%Control%"} : ToInstance ] class MSFT_NetServiceStatusSuccess : MSFT_SCMEventLogEvent { string Service; string Control; }; // // MessageId: EVENT_SERVICE_CONFIG_BACKOUT_FAILED // // MessageText: // // The Service Control Manager encountered an error undoing a change to the // %1 for the %2 service after a failed attempt to update the service's // configuration information, leaving the service's configuration information // in an unpredictable state. Use the Services MMC snap-in to make sure // the service is configured as expected. // [ EventId(0xC0001B7D) : ToInstance, EventType(1) : ToInstance, InsertionStringTemplates {"%Service%", "%ConfigField%"} : ToInstance ] class MSFT_NetServiceConfigBackoutFailed : MSFT_SCMEventLogEvent { string Service; string ConfigField; }; // // MessageId: EVENT_FIRST_LOGON_FAILED_II // // MessageText: // // The %1 service was unable to log on as %2 with the currently configured // password due to the following error: %n%3. To ensure that the service is // configured properly, use the Services snap-in in Microsoft Management // Console (MMC). // [ EventId(0xC0001B7E) : ToInstance, EventType(1) : ToInstance, InsertionStringTemplates {"%Service%", "%Account%", "%%%%%Error%"} : ToInstance ] class MSFT_NetFirstLogonFailedII : MSFT_SCMEventLogEvent { string Service; string Account; uint32 Error; }; // // MessageId: EVENT_SERVICE_DIFFERENT_PID_CONNECTED // // MessageText: // // A service process other than the one launched by the Service Control Manager // connected when starting the %1 service. The Service Control Manager launched // process %2 and process %3 connected instead. // // Note that if this service is configured to start under a debugger, this behavior // is expected. // [ EventId(0x80001B7F) : ToInstance, EventType(2) : ToInstance, InsertionStringTemplates {"%Service%", "%ExpectedPID%", "%ActualPID%"} : ToInstance ] class MSFT_NetServiceDifferentPIDConnected : MSFT_SCMEventLogEvent { string Service; uint32 ExpectedPID; uint32 ActualPID; }; // // MessageId: EVENT_SERVICE_START_TYPE_CHANGED // // MessageText: // // The start type of the %1 service was changed from %2 to %3. // [ EventId(0x40001B80) : ToInstance, EventType(4) : ToInstance, InsertionStringTemplates {"%Service%", "%OldStartType%", "%NewStartType%"} : ToInstance ] class MSFT_NetServiceStartTypeChanged : MSFT_SCMEventLogEvent { string Service; string OldStartType; string NewStartType; string sid; }; // // MessageId: EVENT_SERVICE_LOGON_TYPE_NOT_GRANTED // // MessageText: // // The %1 service was unable to log on as %2 with the currently configured // password due to the following error: %n%3. To ensure that the service is // configured properly, use the Services snap-in in Microsoft Management // Console (MMC). // [ EventId(0xC0001B81) : ToInstance, EventType(1) : ToInstance, InsertionStringTemplates {"%Service%", "%Account%", "%%%%%Error%"} : ToInstance ] class MSFT_NetServiceLogonTypeNotGranted : MSFT_SCMEventLogEvent { string Service; string Account; uint32 Error; }; // // MessageId: EVENT_SERVICE_STOP_SUCCESS_WITH_REASON // // MessageText: // // The %1 service was successfully sent a %2 control.%n%n // The reason specified was: %3 [%4]%n%n // Comment: %5 // [ EventId(0x40001B82) : ToInstance, EventType(4) : ToInstance, InsertionStringTemplates {"%Service%", "%Control%", "%Reason%", "%ReasonText%", "%Comment%"} : ToInstance ] class MSFT_NetServiceStopControlSuccess : MSFT_SCMEventLogEvent { string Service; string Control; string Reason; string ReasonText; string Comment; string sid; }; // // MessageId: EVENT_SERVICE_SHUTDOWN_FAILED // // MessageText: // // The %1 service did not shutdown properly on a preshutdown notification. // [ EventId(0xC0001B83) : ToInstance, EventType(1) : ToInstance, InsertionStringTemplates {"%Service%"} : ToInstance ] class MSFT_NetServiceShutdownFailed : MSFT_SCMEventLogEvent { string Service; }; // // MessageId: EVENT_SERVICE_SLOW_STARTUP // // MessageText: // // The following service is taking more than %2 minutes to start and may be hung: %1%n%n // Contact your system administrator or service vendor for approximate startup times for this service.%n%n // If you think this service might be slowing system response or logon time, talk to your system administrator // about whether the service should be disabled until the problem is identified.%n%nYou may have to restart the // computer in safe mode before you can disable the service. // [ EventId(0x80001B84) : ToInstance, EventType(2) : ToInstance, InsertionStringTemplates {"%Service%", "%StartupTime%"} : ToInstance ] class MSFT_NetServiceSlowStartup : MSFT_SCMEventLogEvent { string Service; uint32 StartupTime; }; ///////////////////////////////////////////////////////////////////////////// // SCM Event Provider registration. #pragma DeleteInstance("MSFT_WMI_NonCOMEventProvider.Name=\"SCM Event Provider\"", NOFAIL) instance of __Win32Provider as $P1 { Name = "SCM Event Provider"; HostingModel = "Decoupled:NonCOM"; }; instance of __EventProviderRegistration { Provider = $P1; EventQueryList = { "select * from MSFT_SCMEvent" }; }; ///////////////////////////////////////////////////////////////////////////// // SCM Event Log consumer registration // // clean up any old subscriptions in root\cimv2 ( left by whistler beta1 ) // #pragma deleteinstance("__FilterToConsumerBinding.Consumer=\"NTEventLogEventConsumer.Name=\\\"SCM Event Log Consumer\\\"\",Filter=\"__EventFilter.Name=\\\"SCM Event Log Filter\\\"\"", NOFAIL ) #pragma deleteinstance("__EventFilter.Name=\"SCM Event Log Filter\"", NOFAIL ) #pragma namespace ("\\\\.\\root\\subscription") instance of NTEventLogEventConsumer { Name = "SCM Event Log Consumer"; SourceName = "Service Control Manager"; EventType = 1; Category = 0; NameOfUserSIDProperty = "sid"; CreatorSid = {1,2,0,0,0,0,0,5,32,0,0,0,32,2,0,0}; }; ///////////////////////////////////////////////////////////////////////////// // SCM Event Log filter instance of __EventFilter { Name = "SCM Event Log Filter"; QueryLanguage = "WQL"; Query = "select * from MSFT_SCMEventLogEvent"; EventNamespace = "root\\cimv2"; CreatorSid = {1,2,0,0,0,0,0,5,32,0,0,0,32,2,0,0}; }; ///////////////////////////////////////////////////////////////////////////// // SCM Event Log filter-to-consumer binding instance of __FilterToConsumerBinding { Consumer = "NTEventLogEventConsumer.Name=\"SCM Event Log Consumer\""; Filter = "__EventFilter.Name=\"SCM Event Log Filter\""; CreatorSid = {1,2,0,0,0,0,0,5,32,0,0,0,32,2,0,0}; };