Custom dynamic link libraries loading?

[debodun]

On a recent system scan with VEW, I had this questionable result:


Type: Warning Category: 0
Event: 11 Source: Microsoft-Windows-Wininit
Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications.

Is this something I should be concerned about? If so, is there anything I can do?

 

[iko22]

Let me see, ... "VEW" is Vino's Event Viewer??

If I did not know that, I still could tell that what you have received is a Warning and not an Error. So, your computer still can compute correctly, and you could happily ignore the warning.

If however, you want to do something about it, then I believe there is a registry fix, that wither 2 has found in this thread (post #2) Custom dynamic link libraries are being loaded for every application.

Perhaps you could open regedit, and navigate to those keys, and see what is in there.

 

[debodun]

Thanks for the tip.

 

[file3456]

Yeah, I've seen that warning many times on all my computers. I can't remember if I finally fixed it or not.

Edit-

And it looks like that was my thread. LOL The registry trick did work.

Make sure that if you ever monkey with the registry you either backup the registry or do a system restore point first. Better to do both.

 

[debodun]

I looked for those registry items in the instructions. Got as far as HKLM\Software\Microsoft/WindowsNT\Current Version\Windows\


the I didn't see LoadAppInitDLLs in either instance.

 

[iko22]

The two locations are at
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\LoadAppInit_DLLs
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows\LoadAppInit_DLLs

Alternatively, what do you find, if you search the entire registry for LoadAppInit_DLLs ?

 

[debodun]

This is what I see when I open regedit:

 

[file3456]

Double click the folder, man. It's a drop down tree with path names.

So looking at HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\LoadAppInit_DLLs

You go to the HKEY Local Machine folder, then the software folder, then the Microsoft folder, then the Windows NT folder on down, etc.

Back sure you do a system restore point first.

 

[iko22]

This is what I see when I open regedit:

I cannot see the attached image for some reason. I hope F22 Simpilot has answered your question.

In future, when you need to post images, etc. to the forum, please follow these instructions Screenshots and Files - Upload and Post in Seven Forums and be sure to complete steps 10, and 11.

 

[debodun]

Okay, I needed to know that it was LOCAL_MACHINE folder in which to look. Now this is what I see when I open the DLLs.

 

[iko22]

I cant read that as the Forum will not let me enlarge the image.

If you were to complete steps 10 and 11 in the instructions I linked to in post #9, then I might be able to see in greater detail what you are looking at.

 

[torchwood]

Hi

i could expand it -- looks good to me

NOW
check the other entry.


Roy

 

[Barman58]

Bad image has been fixed

 

[debodun]

 

[torchwood]

Hi

WOW64 please,

that ones good

Roy

 

[debodun]

Hi

WOW64 please,

that ones good

Roy

What is the path for that?


Excuse my ignorance, but I'm an old lady and don't have much computer sav vy.

 

[torchwood]

Hi

from here please

HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows\LoadAppInit_DLLs




Roy

 

[debodun]

This is what I see by that path: