found this is it any good ?
- <Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="
nvlddmkm" />
<EventID Qualifiers="
49322">14</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="
2009-05-05T11:26:24.899Z" />
<EventRecordID>26420</EventRecordID>
<Channel>System</Channel>
<Computer>stoney-PC</Computer>
<Security />
</System>
- <EventData>
<Data>\Device\Video4</Data>
<Data />
<Binary>0000000002003000000000000E00AAC0000000000000000000000000000000000000000000000000</Binary>
</EventData>
</Event>