or download this
SEC, 9/12/2004, 14:25:18, Security, 576, Success, P
+rivilege Use, NT AUTHORITY\SYSTEM, GHOST01, Special privile
+ges assigned to new logon:^` User Name: GHOST01$^` Domain:
+ US^` Logon ID: (0x0 0x15307D9E)^` Privileges:
+ SeBackupPrivilege^` SeRestorePrivilege^` SeD
+ebugPrivilege^` SeChangeNotifyPrivilege