Event submitted by Sang Kim
Event ID:
12003
Source:
EventSentry

Message:
The registry value AppInit_DLLs in key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows changed from "" to "wbsys.dll". All files specified in this value will be automatically run when a user logs into the system.




Solution by Sang Kim

2006-02-13 18:14:13 UTC

This event is logged by EvenSentry because an application or file registered itself in the registry key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows by changing a value, thus enabling the application to run automatically when a user logs into the system.

Software Monitoring monitors autorun registry keys changing values to notify you of applications that will run automatically when a user logs in. You can configure this feature at "Packages -> System Health Packages -> Package Name -> Software Monitoring -> Monitor Autorun Locations".



User Information
 
Only an Email address is required for returning users.

Hide Name

Solution

Additional Links