⚑ Deus Ex Machina ➽ Eventlog Lookup

Deus Ex Machina » Eventlog » Event 6013 - EventLog

EventLog - 6013


Information

Description »
The system uptime is 31449600 seconds.
Data formatted as » Bytes
0000: 31 00 2e 00 31 00 00 00   1...1...
0008: 30 00 00 00 4d 00 69 00   0...M.i.
0010: 63 00 72 00 6f 00 73 00   c.r.o.s.
0018: 6f 00 66 00 74 00 20 00   o.f.t. .
0020: 57 00 69 00 6e 00 64 00   W.i.n.d.
0028: 6f 00 77 00 73 00 20 00   o.w.s. .
0030: 53 00 65 00 72 00 76 00   S.e.r.v.
0038: 65 00 72 00 20 00 32 00   e.r. .2.
0040: 30 00 30 00 33 00 20 00   0.0.3. .
0048: 52 00 32 00 00 00 35 00   R.2...5.
0050: 2e 00 32 00 2e 00 33 00   ..2...3.
0058: 37 00 39 00 30 00 20 00   7.9.0. .
0060: 42 00 75 00 69 00 6c 00   B.u.i.l.
0068: 64 00 20 00 33 00 37 00   d. .3.7.
0070: 39 00 30 00 20 00 53 00   9.0. .S.
0078: 65 00 72 00 76 00 69 00   e.r.v.i.
0080: 63 00 65 00 20 00 50 00   c.e. .P.
0088: 61 00 63 00 6b 00 20 00   a.c.k. .
0090: 32 00 00 00 4d 00 75 00   2...M.u.
0098: 6c 00 74 00 69 00 70 00   l.t.i.p.
00a0: 72 00 6f 00 63 00 65 00   r.o.c.e.
00a8: 73 00 73 00 6f 00 72 00   s.s.o.r.
00b0: 20 00 46 00 72 00 65 00    .F.r.e.
00b8: 65 00 00 00 33 00 37 00   e...3.7.
00c0: 39 00 30 00 2e 00 73 00   9.0...s.
00c8: 72 00 76 00 30 00 33 00   r.v.0.3.
00d0: 5f 00 73 00 70 00 32 00   _.s.p.2.
00d8: 5f 00 67 00 64 00 72 00   _.g.d.r.
00e0: 2e 00 31 00 30 00 31 00   ..1.0.1.
00e8: 30 00 31 00 39 00 2d 00   0.1.9.-.
00f0: 30 00 33 00 34 00 30 00   0.3.4.0.
00f8: 00 00 34 00 36 00 65 00   ..4.6.e.
0100: 61 00 35 00 61 00 66 00   a.5.a.f.
0108: 33 00 00 00 4e 00 6f 00   3...N.o.
0110: 74 00 20 00 41 00 76 00   t. .A.v.
0118: 61 00 69 00 6c 00 61 00   a.i.l.a.
0120: 62 00 6c 00 65 00 00 00   b.l.e...
0128: 4e 00 6f 00 74 00 20 00   N.o.t. .
0130: 41 00 76 00 61 00 69 00   A.v.a.i.
0138: 6c 00 61 00 62 00 6c 00   l.a.b.l.
0140: 65 00 00 00 30 00 00 00   e...0...
0148: 34 00 00 00 32 00 30 00   4...2.0.
0150: 34 00 38 00 00 00 38 00   4.8...8.
0158: 30 00 39 00 00 00 6c 00   0.9...l.
0160: 6f 00 63 00 61 00 6c 00   o.c.a.l.
0168: 63 00 6f 00 6d 00 70 00   c.o.m.p.
0170: 75 00 74 00 65 00 72 00   u.t.e.r.
0178: 6e 00 61 00 6d 00 65 00   n.a.m.e.
0180: 2e 00 66 00 71 00 64 00   ..f.q.d.
0188: 6e 00 2e 00 6c 00 6f 00   n...l.o.
0190: 63 00 61 00 6c 00 00 00   c.a.l...
0198: 00 00                     ..    

This eventlog entry, as seen on Windows 2003 in this example - is logged every 24 hours at midday local time. If you change the timezone of your computer (eg due to Daylight Savings Time), this entry will appear to have been logged at a time other than midday.
This entry is useful, as it helps you determine the period of uptime historically, as well as giving you an indication of how the computer clock might have been changed over time.

The data, formatted as bytes, tells you the version and service pack level of Windows, as well as the computername.

You can stop this event from being logged by setting the registry key at HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Reliability\TimeStampInterval (REG DWORD) to 0, or by using the uptime.exe utility with the /heartbeart switch.