We use cookies to provide you with a better experience. If you continue to use this site, we'll assume you're happy with this. Alternatively, click here to find out how to manage these cookies

hide cookie message
Contact Forum Editor

Send an email to our Forum Editor:


PLEASE NOTE: Your name is used only to let the Forum Editor know who sent the message. Both your name and email address will not be used for any other purpose.

Tech Helproom


It's free to register, to post a question or to start / join a discussion


 

Event viewer problem


buteman
Resolved

Likes # 0

This keeps coming up in event viewer anyone know how to fix it.

Log Name: System Source: Microsoft-Windows-Wininit Date: 18/11/2011 21:27:54 Event ID: 11 Task Category: None Level: Warning Keywords:
User: SYSTEM Computer: PC Description: Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications. Event Xml:

11
0
3
0
0
0x4000000000000000

321162


System
roy-PC



0
Like this post
buteman

Likes # 0

cocteau48

Sorry for the delay.

Not using Kaspersky using Avast.

Like this post
buteman

Likes # 0

Well does not look as though there are any fixes in Google for it.

Les 28 I had already did what you had in your second click here.

Re: [WIN7] Event ID: 11 - but AppInit is blank. RESOLVED

The warning is removed by restoring the following registry key to the default value of "0"

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\LoadAppInit_DLLs

If a program loads a DLL via AppInit it will set LoadAppInit_DLLs to "1". Problem is that when the program is uninstalled it may not change it back to "0" thus the error, regardless of whether any DLLs are actually being loaded via AppInit.

Now I set that back to Zero and in rebooting that problem has gone but getting further problems appearing instead. So I may revert that back to 1 again and see what happens.

Hi Fruit Bat /\0/\ I know that was one of your fixes as well and I will check your others shortly.

Like this post
buteman

Likes # 0

Sorry for the delay but I could not get PCA to run for at least the last 30 minutes.

Ran sfc /scannow and it found a couple of things that it sorted so going to do another restart and see what problems I get this time.

Like this post
buteman

Likes # 0

Also check if HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows\LoadAppInit_DLLs is set to 1 and if so, change it to 0.

Got as far as WOW with that there was no 6432Node after it nor microsoft etc.

Just going to have a look at the other one.Using W/7 32bit

Like this post
buteman

Likes # 0

This is part of the new Warning that I am getting but the other warning has gone.

15 user registry handles leaked from \Registry\User\S-1-5-21-2846201677-1536757173-425328225-1001: Process 1896 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-2846201677-1536757173-425328225-1001 Process 1896 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-2846201677-1536757173-425328225-1001 Process 1896 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-2846201677-1536757173-425328225-1001 Process 1896 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-2846201677-1536757173-425328225-1001 Process 1896 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-2846201677-1536757173-425328225-1001\Software\Microsoft\SystemCertificates\Disallowed Process 1896 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-2846201677-1536757173-425328225-1001\Software\Policies\Microsoft\SystemCertificates Process 1896 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-2846201677-1536757173-425328225-1001\Software\Policies\Microsoft\SystemCertificates Process 1896 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-2846201677-1536757173-425328225-1001\Software\Policies\Microsoft\SystemCertificates Process 1896 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-2846201677-1536757173-425328225-1001\Software\Policies\Microsoft\SystemCertificates Process 1896 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-2846201677-1536757173-425328225-1001\Software\Microsoft\SystemCertificates\My Process 1896 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-2846201677-1536757173-425328225-1001\Software\Microsoft\SystemCertificates\CA Process 1896 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-2846201677-1536757173-425328225-1001\Software\Microsoft\SystemCertificates\Root Process 1896 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-2846201677-1536757173-425328225-1001\Software\Microsoft\SystemCertificates\SmartCardRoot Process 1896 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-2846201677-1536757173-425328225-1001\Software\Microsoft\SystemCertificates\trust Process 1896 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-2846201677-1536757173-425328225-1001\Software\Microsoft\SystemCertificates\TrustedPeople

Now the problem is should should I set it back to the 1 from Zero not sure which was the worst problem.

Like this post
buteman

Likes # 0

Ok after a reboot both warnings have gone so we must have done something right.

Will leave it as it is just now and see if it comes back eventually.

So far so good lets hope it stays this way.

I never changed the Zero back to 1.

Will leave this open until tomorrow just in case anything else occurs.

Thank you all for all of your help.

By the way was PCA down for any of you or was it just my computer.

Like this post
rdave13

Likes # 0

Down for me also. Looks like system file checker worked first time.

Like this post
buteman

Likes # 0

Ok that seems to have got rid of that problem another couple of minor ones in event viewer that I am not going to bother about.

So thanks every one for there help in solving this one.

Like this post  

Reply to this topic

This thread has been locked.



IDG UK Sites

LG G Watch R video review: The most desirable Android Wear smartwatch

IDG UK Sites

Apple's 2014 highlights: the most significant Apple news of 2014

IDG UK Sites

2015 creative trends: leading designers & artists reveal the biggest influences & changes coming th)......

IDG UK Sites

Ultimate iOS 8 Tips: 35 awesome and advanced tips for using iOS 8 on iPhone and iPad