回复：用“Event Viewer”看看,这是昨晚断网那段时间的信息，请指教。

来源: cheetah 于 2014-04-19 19:12:02 [档案] [旧帖] [给我悄悄话] 本文已被阅读：次 (19148 bytes)

回答: 用“Event Viewer”看看到底发生了什么。由加州老李于 2014-04-19 18:22:21

Log Name:      Application
Source:        LMS
Date:          19/04/2014 12:37:15 PM
Event ID:      1
Task Category: None
Level:         Warning
Keywords:      Classic
User:          SYSTEM
Computer:      tigerzheng-PC
Description:
LMS Service cannot connect to Intel(R) MEI driver
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
    <Provider Name="LMS" />
    <EventID Qualifiers="32768">1</EventID>
    <Level>3</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-04-19T19:37:15.000000000Z" />
    <EventRecordID>78105</EventRecordID>
    <Channel>Application</Channel>
    <Computer>tigerzheng-PC</Computer>
    <Security UserID="S-1-5-18" />
</System>
<EventData>
    <Data>LMS Service cannot connect to Intel(R) MEI driver</Data>
</EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-User Profiles Service
Date:          18/04/2014 10:11:44 PM
Event ID:      1530
Task Category: None
Level:         Warning
Keywords:
User:          SYSTEM
Computer:      tigerzheng-PC
Description:
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.

DETAIL -
1 user registry handles leaked from \Registry\User\S-1-5-21-4259403637-4172812674-2903418784-1000:
Process 4368 (\Device\HarddiskVolume3\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe) has opened key \REGISTRY\USER\S-1-5-21-4259403637-4172812674-2903418784-1000

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
    <Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" />
    <EventID>1530</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2014-04-19T05:11:44.204707100Z" />
    <EventRecordID>78046</EventRecordID>
    <Correlation />
    <Execution ProcessID="1032" ThreadID="1208" />
    <Channel>Application</Channel>
    <Computer>tigerzheng-PC</Computer>
    <Security UserID="S-1-5-18" />
</System>
<EventData Name="EVENT_HIVE_LEAK">
    <Data Name="Detail">1 user registry handles leaked from \Registry\User\S-1-5-21-4259403637-4172812674-2903418784-1000:
Process 4368 (\Device\HarddiskVolume3\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe) has opened key \REGISTRY\USER\S-1-5-21-4259403637-4172812674-2903418784-1000
</Data>
</EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-User Profiles Service
Date:          18/04/2014 9:45:53 PM
Event ID:      1530
Task Category: None
Level:         Warning
Keywords:
User:          SYSTEM
Computer:      tigerzheng-PC
Description:
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.

DETAIL -
5 user registry handles leaked from \Registry\User\S-1-5-21-4259403637-4172812674-2903418784-1000:
Process 4300 (\Device\HarddiskVolume3\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe) has opened key \REGISTRY\USER\S-1-5-21-4259403637-4172812674-2903418784-1000
Process 4300 (\Device\HarddiskVolume3\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe) has opened key \REGISTRY\USER\S-1-5-21-4259403637-4172812674-2903418784-1000\Software\Microsoft\Internet Explorer\Main
Process 4300 (\Device\HarddiskVolume3\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe) has opened key \REGISTRY\USER\S-1-5-21-4259403637-4172812674-2903418784-1000\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
Process 4300 (\Device\HarddiskVolume3\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe) has opened key \REGISTRY\USER\S-1-5-21-4259403637-4172812674-2903418784-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings
Process 4300 (\Device\HarddiskVolume3\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe) has opened key \REGISTRY\USER\S-1-5-21-4259403637-4172812674-2903418784-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
    <Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" />
    <EventID>1530</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2014-04-19T04:45:53.338325400Z" />
    <EventRecordID>77988</EventRecordID>
    <Correlation ActivityID="{030B6C48-F800-0001-E3ED-0030BD59CF01}" />
    <Execution ProcessID="708" ThreadID="1136" />
    <Channel>Application</Channel>
    <Computer>tigerzheng-PC</Computer>
    <Security UserID="S-1-5-18" />
</System>
<EventData Name="EVENT_HIVE_LEAK">
    <Data Name="Detail">5 user registry handles leaked from \Registry\User\S-1-5-21-4259403637-4172812674-2903418784-1000:
Process 4300 (\Device\HarddiskVolume3\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe) has opened key \REGISTRY\USER\S-1-5-21-4259403637-4172812674-2903418784-1000
Process 4300 (\Device\HarddiskVolume3\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe) has opened key \REGISTRY\USER\S-1-5-21-4259403637-4172812674-2903418784-1000\Software\Microsoft\Internet Explorer\Main
Process 4300 (\Device\HarddiskVolume3\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe) has opened key \REGISTRY\USER\S-1-5-21-4259403637-4172812674-2903418784-1000\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
Process 4300 (\Device\HarddiskVolume3\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe) has opened key \REGISTRY\USER\S-1-5-21-4259403637-4172812674-2903418784-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings
Process 4300 (\Device\HarddiskVolume3\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe) has opened key \REGISTRY\USER\S-1-5-21-4259403637-4172812674-2903418784-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl
</Data>
</EventData>
</Event>

Log Name:      System
Source:        Microsoft-Windows-Kernel-PnP
Date:          19/04/2014 9:25:07 AM
Event ID:      219
Task Category: (212)
Level:         Warning
Keywords:
User:          SYSTEM
Computer:      tigerzheng-PC
Description:
The driver \Driver\WUDFRd failed to load for the device WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_GENERIC-&PROD_COMPACT_FLASH&REV_1.00#8&35CCDA1&0&20060413092100000&0#.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
    <Provider Name="Microsoft-Windows-Kernel-PnP" Guid="{9C205A39-1250-487D-ABD7-E831C6290539}" />
    <EventID>219</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>212</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2014-04-19T16:25:07.524784200Z" />
    <EventRecordID>471169</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="56" />
    <Channel>System</Channel>
    <Computer>tigerzheng-PC</Computer>
    <Security UserID="S-1-5-18" />
</System>
<EventData>
    <Data Name="DriverNameLength">136</Data>
    <Data Name="DriverName">WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_GENERIC-&PROD_COMPACT_FLASH&REV_1.00#8&35CCDA1&0&20060413092100000&0#</Data>
    <Data Name="Status">3221226341</Data>
    <Data Name="FailureNameLength">14</Data>
    <Data Name="FailureName">\Driver\WUDFRd</Data>
    <Data Name="Version">0</Data>
</EventData>
</Event>

Log Name:      System
Source:        Microsoft-Windows-WLAN-AutoConfig
Date:          18/04/2014 10:11:47 PM
Event ID:      4001
Task Category: None
Level:         Warning
Keywords:
User:          SYSTEM
Computer:      tigerzheng-PC
Description:
WLAN AutoConfig service has successfully stopped.

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
    <Provider Name="Microsoft-Windows-WLAN-AutoConfig" Guid="{9580D7DD-0379-4658-9870-D5BE7D52D6DE}" />
    <EventID>4001</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>2</Opcode>
    <Keywords>0x4000000000000000</Keywords>
    <TimeCreated SystemTime="2014-04-19T05:11:47.199912300Z" />
    <EventRecordID>471068</EventRecordID>
    <Correlation />
    <Execution ProcessID="528" ThreadID="5260" />
    <Channel>System</Channel>
    <Computer>tigerzheng-PC</Computer>
    <Security UserID="S-1-5-18" />
</System>
<EventData>
</EventData>
</Event>

Log Name:      System
Source:        Microsoft-Windows-Kernel-PnP
Date:          18/04/2014 10:06:13 PM
Event ID:      219
Task Category: (212)
Level:         Warning
Keywords:
User:          SYSTEM
Computer:      tigerzheng-PC
Description:
The driver \Driver\WUDFRd failed to load for the device WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_GENERIC-&PROD_COMPACT_FLASH&REV_1.00#8&35CCDA1&0&20060413092100000&0#.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
    <Provider Name="Microsoft-Windows-Kernel-PnP" Guid="{9C205A39-1250-487D-ABD7-E831C6290539}" />
    <EventID>219</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>212</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2014-04-19T05:06:13.964760400Z" />
    <EventRecordID>470998</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="60" />
    <Channel>System</Channel>
    <Computer>tigerzheng-PC</Computer>
    <Security UserID="S-1-5-18" />
</System>
<EventData>
    <Data Name="DriverNameLength">136</Data>
    <Data Name="DriverName">WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_GENERIC-&PROD_COMPACT_FLASH&REV_1.00#8&35CCDA1&0&20060413092100000&0#</Data>
    <Data Name="Status">3221226341</Data>
    <Data Name="FailureNameLength">14</Data>
    <Data Name="FailureName">\Driver\WUDFRd</Data>
    <Data Name="Version">0</Data>
</EventData>
</Event>

Log Name:      System
Source:        Microsoft-Windows-WLAN-AutoConfig
Date:          18/04/2014 9:45:55 PM
Event ID:      4001
Task Category: None
Level:         Warning
Keywords:
User:          SYSTEM
Computer:      tigerzheng-PC
Description:
WLAN AutoConfig service has successfully stopped.

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
    <Provider Name="Microsoft-Windows-WLAN-AutoConfig" Guid="{9580D7DD-0379-4658-9870-D5BE7D52D6DE}" />
    <EventID>4001</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>2</Opcode>
    <Keywords>0x4000000000000000</Keywords>
    <TimeCreated SystemTime="2014-04-19T04:45:55.257128800Z" />
    <EventRecordID>470903</EventRecordID>
    <Correlation />
    <Execution ProcessID="456" ThreadID="4144" />
    <Channel>System</Channel>
    <Computer>tigerzheng-PC</Computer>
    <Security UserID="S-1-5-18" />
</System>
<EventData>
</EventData>
</Event>