2014-11-18 16:10:46: entry.Category: (0)entry.CategoryNumber: 0entry.Container: entry.Data: System.Byte[]entry.EntryType: Warningentry.EventID: 1530entry.Index: 5476entry.InstanceId: 1530entry.MachineName: 3C-SFC-BOentry.Message: Windows 检测到注册表文件仍在由其他应用程序或服务使用。将立即卸载此文件。包含注册表文件的应用程序或服务以后可能无法正确运行。 详细信息 -  15 user registry handles leaked from \Registry\User\S-1-5-21-4143979551-1179717972-756318947-1000:Process 872 (\Device\HarddiskVolume1\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-4143979551-1179717972-756318947-1000Process 872 (\Device\HarddiskVolume1\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-4143979551-1179717972-756318947-1000Process 872 (\Device\HarddiskVolume1\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-4143979551-1179717972-756318947-1000Process 872 (\Device\HarddiskVolume1\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-4143979551-1179717972-756318947-1000Process 872 (\Device\HarddiskVolume1\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-4143979551-1179717972-756318947-1000\Software\Microsoft\SystemCertificates\RootProcess 872 (\Device\HarddiskVolume1\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-4143979551-1179717972-756318947-1000\Software\Microsoft\SystemCertificates\SmartCardRootProcess 872 (\Device\HarddiskVolume1\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-4143979551-1179717972-756318947-1000\Software\Policies\Microsoft\SystemCertificatesProcess 872 (\Device\HarddiskVolume1\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-4143979551-1179717972-756318947-1000\Software\Policies\Microsoft\SystemCertificatesProcess 872 (\Device\HarddiskVolume1\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-4143979551-1179717972-756318947-1000\Software\Policies\Microsoft\SystemCertificatesProcess 872 (\Device\HarddiskVolume1\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-4143979551-1179717972-756318947-1000\Software\Policies\Microsoft\SystemCertificatesProcess 872 (\Device\HarddiskVolume1\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-4143979551-1179717972-756318947-1000\Software\Microsoft\SystemCertificates\TrustedPeopleProcess 872 (\Device\HarddiskVolume1\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-4143979551-1179717972-756318947-1000\Software\Microsoft\SystemCertificates\trustProcess 872 (\Device\HarddiskVolume1\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-4143979551-1179717972-756318947-1000\Software\Microsoft\SystemCertificates\DisallowedProcess 872 (\Device\HarddiskVolume1\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-4143979551-1179717972-756318947-1000\Software\Microsoft\SystemCertificates\MyProcess 872 (\Device\HarddiskVolume1\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-4143979551-1179717972-756318947-1000\Software\Microsoft\SystemCertificates\CAentry.ReplacementStrings: System.String[]entry.Site: entry.Source: Microsoft-Windows-User Profiles Serviceentry.TimeGenerated: 2014/11/17 8:22:23entry.TimeWritten: 2014/11/17 8:22:23entry.UserName: NT AUTHORITY\SYSTEM2014-11-18 16:10:46: entry.Category: (0)entry.CategoryNumber: 0entry.Container: entry.Data: System.Byte[]entry.EntryType: Warningentry.EventID: 100entry.Index: 5496entry.InstanceId: 3221225572entry.MachineName: 3C-SFC-BOentry.Message: 无法找到源“MySQL”中事件 ID“-1073741724”的说明。  本地计算机可能没有显示该消息所需的注册表信息或消息 DLL 文件，或者您可能无权访问它们。  下列信息是该事件的一部分:‘‘--default-character-set‘ is deprecated and will be removed in a future release. Please use ‘--character-set-server‘ instead.‘entry.ReplacementStrings: System.String[]entry.Site: entry.Source: MySQLentry.TimeGenerated: 2014/11/17 8:23:54entry.TimeWritten: 2014/11/17 8:23:54entry.UserName: 2014-11-18 16:10:46: entry.Category: (0)entry.CategoryNumber: 0entry.Container: entry.Data: System.Byte[]entry.EntryType: Warningentry.EventID: 4001entry.Index: 3965entry.InstanceId: 4001entry.MachineName: 3C-SFC-BOentry.Message: 已成功停止 WLAN AutoConfig 服务。entry.ReplacementStrings: System.String[]entry.Site: entry.Source: Microsoft-Windows-WLAN-AutoConfigentry.TimeGenerated: 2014/11/17 8:22:34entry.TimeWritten: 2014/11/17 8:22:34entry.UserName: NT AUTHORITY\SYSTEM2014-11-18 16:10:46: entry.Category: (0)entry.CategoryNumber: 0entry.Container: entry.Data: System.Byte[]entry.EntryType: Warningentry.EventID: 1entry.Index: 3986entry.InstanceId: 2147483649entry.MachineName: 3C-SFC-BOentry.Message: Realtek PCIe GBE Family Controller is disconnected from network.entry.ReplacementStrings: System.String[]entry.Site: entry.Source: RTL8167entry.TimeGenerated: 2014/11/17 8:23:20entry.TimeWritten: 2014/11/17 8:23:20entry.UserName: 2014-11-18 16:10:46: entry.Category: (212)entry.CategoryNumber: 212entry.Container: entry.Data: System.Byte[]entry.EntryType: Warningentry.EventID: 219entry.Index: 4097entry.InstanceId: 219entry.MachineName: 3C-SFC-BOentry.Message: 无法找到源“Microsoft-Windows-Kernel-PnP”中事件 ID“219”的说明。  本地计算机可能没有显示该消息所需的注册表信息或消息 DLL 文件，或者您可能无权访问它们。  下列信息是该事件的一部分:‘123‘, ‘WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SANDISK&PROD_CRUZER_FIT&REV_1.27#4C530002830430112372&0#‘, ‘3221226341‘, ‘14‘, ‘\Driver\WUDFRd‘, ‘0‘entry.ReplacementStrings: System.String[]entry.Site: entry.Source: Microsoft-Windows-Kernel-PnPentry.TimeGenerated: 2014/11/17 9:41:15entry.TimeWritten: 2014/11/17 9:41:15entry.UserName: NT AUTHORITY\SYSTEM2014-11-18 16:10:46: entry.Category: (0)entry.CategoryNumber: 0entry.Container: entry.Data: System.Byte[]entry.EntryType: Warningentry.EventID: 262195entry.Index: 4099entry.InstanceId: 2147745843entry.MachineName: 3C-SFC-BOentry.Message: 传呼期间在设备 \Device\Harddisk1\DR1 上检测到一个错误。entry.ReplacementStrings: System.String[]entry.Site: entry.Source: Diskentry.TimeGenerated: 2014/11/17 9:41:48entry.TimeWritten: 2014/11/17 9:41:48entry.UserName: 2014-11-18 16:14:24: entry.Category: (0)entry.CategoryNumber: 0entry.Container: entry.Data: System.Byte[]entry.EntryType: Warningentry.EventID: 2264entry.Index: 5559entry.InstanceId: 2147485912entry.MachineName: 3C-SFC-BOentry.Message: 指定用于缓存所压缩内容 D:\Users\BO\AppData\Local\Temp\iisexpress\IIS Temporary Compressed Files\Clr4IntegratedAppPool 的目录无效。将禁用静态压缩。entry.ReplacementStrings: System.String[]entry.Site: entry.Source: IIS Expressentry.TimeGenerated: 2014/11/18 13:14:42entry.TimeWritten: 2014/11/18 13:14:42entry.UserName: 2014-11-18 16:14:24: entry.Category: Web 事件entry.CategoryNumber: 3entry.Container: entry.Data: System.Byte[]entry.EntryType: Warningentry.EventID: 1309entry.Index: 5560entry.InstanceId: 2147484957entry.MachineName: 3C-SFC-BOentry.Message: 事件代码: 3005事件消息: 发生了未经处理的异常。事件时间: 2014/11/18 13:16:29事件时间(UTC): 2014/11/18 5:16:29事件 ID: 75d86587c6b94b6d8d180e737713595a事件序列: 45事件匹配项: 1事件详细信息代码: 0应用程序信息:    应用程序域: /LM/W3SVC/14/ROOT-1-130607612749388584    信任级别: Full    应用程序虚拟路径: /    应用程序路径: F:\C#Test\Elmah-Log4Net-LogManager-master\LogManager.ExampleMonitoredApplication    计算机名: 3C-SFC-BO进程信息:    进程 ID: 6328    进程名: iisexpress.exe    帐户名: 3C-SFC-BO\BO异常信息:    异常类型: NotImplementedException    异常消息: Button1_OnClick Exception   在 LogManager.ExampleMonitoredApplication._Default.Button1_OnClick(Object sender, EventArgs e) 位置 f:\C#Test\Elmah-Log4Net-LogManager-master\LogManager.ExampleMonitoredApplication\Default.aspx.cs:行号 49   在 System.Web.UI.WebControls.Button.OnClick(EventArgs e)   在 System.Web.UI.WebControls.Button.RaisePostBackEvent(String eventArgument)   在 System.Web.UI.WebControls.Button.System.Web.UI.IPostBackEventHandler.RaisePostBackEvent(String eventArgument)   在 System.Web.UI.Page.RaisePostBackEvent(IPostBackEventHandler sourceControl, String eventArgument)   在 System.Web.UI.Page.RaisePostBackEvent(NameValueCollection postData)   在 System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)请求信息:    请求 URL: http://localhost:59065/default.aspx    请求路径: /default.aspx    用户主机地址: ::1    用户:     是否已经过身份验证: False    身份验证类型:     线程帐户名: 3C-SFC-BO\BO线程信息:    线程 ID: 6    线程帐户名: 3C-SFC-BO\BO    是否正在模拟: False    堆栈跟踪:    在 LogManager.ExampleMonitoredApplication._Default.Button1_OnClick(Object sender, EventArgs e) 位置 f:\C#Test\Elmah-Log4Net-LogManager-master\LogManager.ExampleMonitoredApplication\Default.aspx.cs:行号 49   在 System.Web.UI.WebControls.Button.OnClick(EventArgs e)   在 System.Web.UI.WebControls.Button.RaisePostBackEvent(String eventArgument)   在 System.Web.UI.WebControls.Button.System.Web.UI.IPostBackEventHandler.RaisePostBackEvent(String eventArgument)   在 System.Web.UI.Page.RaisePostBackEvent(IPostBackEventHandler sourceControl, String eventArgument)   在 System.Web.UI.Page.RaisePostBackEvent(NameValueCollection postData)   在 System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)自定义事件详细信息:entry.ReplacementStrings: System.String[]entry.Site: entry.Source: ASP.NET 4.0.30319.0entry.TimeGenerated: 2014/11/18 13:16:29entry.TimeWritten: 2014/11/18 13:16:29entry.UserName: 2014-11-18 16:14:24: entry.Category: (0)entry.CategoryNumber: 0entry.Container: entry.Data: System.Byte[]entry.EntryType: Warningentry.EventID: 2264entry.Index: 5561entry.InstanceId: 2147485912entry.MachineName: 3C-SFC-BOentry.Message: 指定用于缓存所压缩内容 D:\Users\BO\AppData\Local\Temp\iisexpress\IIS Temporary Compressed Files\Clr4IntegratedAppPool 的目录无效。将禁用静态压缩。entry.ReplacementStrings: System.String[]entry.Site: entry.Source: IIS Expressentry.TimeGenerated: 2014/11/18 13:18:27entry.TimeWritten: 2014/11/18 13:18:27entry.UserName: 2014-11-18 16:14:24: entry.Category: Web 事件entry.CategoryNumber: 3entry.Container: entry.Data: System.Byte[]entry.EntryType: Warningentry.EventID: 1309entry.Index: 5562entry.InstanceId: 2147484957entry.MachineName: 3C-SFC-BOentry.Message: 事件代码: 3005事件消息: 发生了未经处理的异常。事件时间: 2014/11/18 14:44:28事件时间(UTC): 2014/11/18 6:44:28事件 ID: 5d277274940f43a8ae45f8fa710a2f6c事件序列: 26事件匹配项: 1事件详细信息代码: 0应用程序信息:    应用程序域: 761535ab-1-130607664145308262    信任级别: Full    应用程序虚拟路径: /WIPWeb Dev    应用程序路径: E:\Bo\3NodGx WIP Web\WIPWeb Dev    计算机名: 3C-SFC-BO进程信息:    进程 ID: 8060    进程名: WebDev.WebServer40.exe    帐户名: 3C-SFC-BO\BO异常信息:    异常类型: SqlException    异常消息: Conversion failed when converting the varchar value ‘2014-11-17‘ to data type int.   在 System.Data.SqlClient.SqlConnection.OnError(SqlException exception, Boolean breakConnection, Action`1 wrapCloseInAction)   在 System.Data.SqlClient.SqlInternalConnection.OnError(SqlException exception, Boolean breakConnection, Action`1 wrapCloseInAction)   在 System.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject stateObj, Boolean callerHasConnectionLock, Boolean asyncClose)   在 System.Data.SqlClient.TdsParser.TryRun(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj, Boolean& dataReady)   在 System.Data.SqlClient.SqlDataReader.TryHasMoreRows(Boolean& moreRows)   在 System.Data.SqlClient.SqlDataReader.TryReadInternal(Boolean setTimeout, Boolean& more)   在 System.Data.SqlClient.SqlDataReader.Read()   在 System.Data.Common.DataAdapter.FillLoadDataRow(SchemaMapping mapping)   在 System.Data.Common.DataAdapter.FillFromReader(DataSet dataset, DataTable datatable, String srcTable, DataReaderContainer dataReader, Int32 startRecord, Int32 maxRecords, DataColumn parentChapterColumn, Object parentChapterValue)   在 System.Data.Common.DataAdapter.Fill(DataSet dataSet, String srcTable, IDataReader dataReader, Int32 startRecord, Int32 maxRecords)   在 System.Data.Common.DbDataAdapter.FillInternal(DataSet dataset, DataTable[] datatables, Int32 startRecord, Int32 maxRecords, String srcTable, IDbCommand command, CommandBehavior behavior)   在 System.Data.Common.DbDataAdapter.Fill(DataSet dataSet, Int32 startRecord, Int32 maxRecords, String srcTable, IDbCommand command, CommandBehavior behavior)   在 System.Data.Common.DbDataAdapter.Fill(DataSet dataSet)   在 _Default.SHOWMONTHOUTPUT(String transtype, String field1) 位置 e:\Bo\3NodGx WIP Web\WIPWeb Dev\MFGoutputlist.aspx.cs:行号 65   在 _Default.Calendar1_SelectionChanged(Object sender, EventArgs e) 位置 e:\Bo\3NodGx WIP Web\WIPWeb Dev\MFGoutputlist.aspx.cs:行号 98   在 System.Web.UI.WebControls.Calendar.OnSelectionChanged()   在 System.Web.UI.WebControls.Calendar.SelectRange(DateTime dateFrom, DateTime dateTo)   在 System.Web.UI.WebControls.Calendar.RaisePostBackEvent(String eventArgument)   在 System.Web.UI.WebControls.Calendar.System.Web.UI.IPostBackEventHandler.RaisePostBackEvent(String eventArgument)   在 System.Web.UI.Page.RaisePostBackEvent(IPostBackEventHandler sourceControl, String eventArgument)   在 System.Web.UI.Page.RaisePostBackEvent(NameValueCollection postData)   在 System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)请求信息:    请求 URL: http://localhost:2785/WIPWeb Dev/MFGoutputlist.aspx    请求路径: /WIPWeb Dev/MFGoutputlist.aspx    用户主机地址: 127.0.0.1    用户: 3C-SFC-BO\BO    是否已经过身份验证: True    身份验证类型: NTLM    线程帐户名: 3C-SFC-BO\BO线程信息:    线程 ID: 4    线程帐户名: 3C-SFC-BO\BO    是否正在模拟: False    堆栈跟踪:    在 System.Data.SqlClient.SqlConnection.OnError(SqlException exception, Boolean breakConnection, Action`1 wrapCloseInAction)   在 System.Data.SqlClient.SqlInternalConnection.OnError(SqlException exception, Boolean breakConnection, Action`1 wrapCloseInAction)   在 System.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject stateObj, Boolean callerHasConnectionLock, Boolean asyncClose)   在 System.Data.SqlClient.TdsParser.TryRun(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj, Boolean& dataReady)   在 System.Data.SqlClient.SqlDataReader.TryHasMoreRows(Boolean& moreRows)   在 System.Data.SqlClient.SqlDataReader.TryReadInternal(Boolean setTimeout, Boolean& more)   在 System.Data.SqlClient.SqlDataReader.Read()   在 System.Data.Common.DataAdapter.FillLoadDataRow(SchemaMapping mapping)   在 System.Data.Common.DataAdapter.FillFromReader(DataSet dataset, DataTable datatable, String srcTable, DataReaderContainer dataReader, Int32 startRecord, Int32 maxRecords, DataColumn parentChapterColumn, Object parentChapterValue)   在 System.Data.Common.DataAdapter.Fill(DataSet dataSet, String srcTable, IDataReader dataReader, Int32 startRecord, Int32 maxRecords)   在 System.Data.Common.DbDataAdapter.FillInternal(DataSet dataset, DataTable[] datatables, Int32 startRecord, Int32 maxRecords, String srcTable, IDbCommand command, CommandBehavior behavior)   在 System.Data.Common.DbDataAdapter.Fill(DataSet dataSet, Int32 startRecord, Int32 maxRecords, String srcTable, IDbCommand command, CommandBehavior behavior)   在 System.Data.Common.DbDataAdapter.Fill(DataSet dataSet)   在 _Default.SHOWMONTHOUTPUT(String transtype, String field1) 位置 e:\Bo\3NodGx WIP Web\WIPWeb Dev\MFGoutputlist.aspx.cs:行号 65   在 _Default.Calendar1_SelectionChanged(Object sender, EventArgs e) 位置 e:\Bo\3NodGx WIP Web\WIPWeb Dev\MFGoutputlist.aspx.cs:行号 98   在 System.Web.UI.WebControls.Calendar.OnSelectionChanged()   在 System.Web.UI.WebControls.Calendar.SelectRange(DateTime dateFrom, DateTime dateTo)   在 System.Web.UI.WebControls.Calendar.RaisePostBackEvent(String eventArgument)   在 System.Web.UI.WebControls.Calendar.System.Web.UI.IPostBackEventHandler.RaisePostBackEvent(String eventArgument)   在 System.Web.UI.Page.RaisePostBackEvent(IPostBackEventHandler sourceControl, String eventArgument)   在 System.Web.UI.Page.RaisePostBackEvent(NameValueCollection postData)   在 System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)自定义事件详细信息:entry.ReplacementStrings: System.String[]entry.Site: entry.Source: ASP.NET 4.0.30319.0entry.TimeGenerated: 2014/11/18 14:44:28entry.TimeWritten: 2014/11/18 14:44:28entry.UserName: 2014-11-18 16:14:24: entry.Category: (0)entry.CategoryNumber: 0entry.Container: entry.Data: System.Byte[]entry.EntryType: Warningentry.EventID: 36entry.Index: 4181entry.InstanceId: 36entry.MachineName: 3C-SFC-BOentry.Message: 时间服务尚未同步系统时间 86400 秒钟，原因是没有任何时间服务提供程序提供可用的时间戳。只有与时间源同步，时间服务才会更新本地系统时间。如果将本地系统配置为用作客户端的时间服务器，它将停止作为时间源向客户端进行公布。时间服务将继续重试，并与其时间源进行同步。有关详细信息，请查看其他 Win32 时间事件的系统事件日志。运行 ‘w32tm /resync‘ 强制执行即时时间同步。entry.ReplacementStrings: System.String[]entry.Site: entry.Source: Microsoft-Windows-Time-Serviceentry.TimeGenerated: 2014/11/18 8:28:37entry.TimeWritten: 2014/11/18 8:28:37entry.UserName: NT AUTHORITY\LOCAL SERVICE