This link might help.
http://www.sysinternals.com/utilities/rootkitrevealer.html
--
Regards,
Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect
:
| Type: Warning
| Source: Srv
| ʼþÖÖÀà: ÎÞ
| ID: 2013
| Date: 2005-12-12
| Time: 12:02:44
| User: N/A
| Computer: DOU
| Descritpion:
| C: Disk is almost full, please delete some files.
| Data:
| 0000: 00 00 00 00 02 00 48 00 ......H.
| 0008: 00 00 00 00 dd 07 00 80 ....Y..?
| 0010: 00 00 00 00 00 00 00 00 ........
| 0018: 00 00 00 00 00 00 00 00 ........
| 0020: 00 00 00 00 00 00 00 00 ........
|
| Type: Warning
| Source: Print
| ʼþÖÖÀà: ÎÞ
| Event ID: 3
| Date: 2005-12-12
| Time: 13:08:26
| User: NT AUTHORITY\SYSTEM
| Computer: DOU
| Description:
| Printer Microsoft Office Document Image Writer has deleted.
|
|
| Type: Error
| Source: Service Control Manager
| ʼþÖÖÀà: ÎÞ
| Event ID: 7000
| Date: 2005-12-12
| Time: 11:57:34
| User: N/A
| Computer: DOU
| Description:
| Because the following error£¬hpdj5000_200 Service start failure:
| System cannot find the special file.