Custom dynamic link libraries are being loaded for every application

Question

Can anyone tell me why I get this warning in my System Event Viewer (Event ID:11) every time Windows7 x64 boots? Should I worry about it? Is there anything I can do to make it go away?

Walt

Answer 1

For the time being, it won't affect anything else, if AppInit_Dlls is empty.  LoadAppInit_Dlls is a flag that tells Windows to "respect" (load the DLLs in AppInint_DLLs) the AppInit_DLLs value.  Older, pre-Vista apps won't know to set LoadAppInit_DLLs to 1, so the DLLs the would add to this location would not be loaded.  This can be viewed as a good thing, as this was a quick way to get code (good and bad) loaded into the address space of every process that loaded user32.dll (pretty much all of them), which processes AppInit_DLLs.  Newer apps are savvy to the LoadAppInit_DLLs setting so they set it to 1 and also add their components to AppInit_DLLs.  In your case it seems that some program added DLLS to AppInit_DLLs, set LoadAppInit_DLLs to 1, and then the DLLs were removed (manually? cleanup program? uninstall program?) from AppInit_DLLs, but LoadAppInit_DLLs was not restored to the default value of 0 (or not being present at all).

So, our exploration indicates that Windows bases the decision to log the event about "Custom Dynamic Link Libraries being loaded for every application" on the LoadAppInit_DLLs setting, regardless of the contents of the AppInit_DLLs value.

Answer 2

Did you create any custom libraries and then add files from other locations/partition or drives to your custom library folder?

JS

http://www.pagestart.com

---

Never be afraid to ask. This forum has some of the best people in the world available to help.

Answer 3

Do you happen to have AVAST Antivirus software installed? According to Forum member No.Compromise

Its possible the following might be triggering the Custom Dynamic Link Library loading message:

The following modules are likely what are triggering the message about "custom dynamic link libraries":

snxPlugins.DLL DLL registration plugins extension

ALWIL Software

snxBorder.dll avast! snx Border

ALWIL Software

The only way to test is to somehow disable these modules or uninstall the ALWIL software. I doubt the warning is of that much concern, but feel free to check the behavior with those modules disabled/uninstalled if you care.  It is a warning, and not an error.

http://social.answers.microsoft.com/Forums/en/w7performance/thread/fdbd5b60-9d86-42d2-99b5-600e8ed57545

---

Teching It Easy: With Windows	ActiveWin

Answer 4

Did you create any custom libraries and then add files from other locations/partition or drives to your custom library folder?

JS

http://www.pagestart.com

---

Never be afraid to ask. This forum has some of the best people in the world available to help.

Yes, I have added 4 folders to my "libraries" folder. Is that what is causing the warning?

Answer 5

Do you happen to have AVAST Antivirus software installed? According to Forum member No.Compromise

Its possible the following might be triggering the Custom Dynamic Link Library loading message:

The following modules are likely what are triggering the message about "custom dynamic link libraries":

snxPlugins.DLL DLL registration plugins extension

ALWIL Software

snxBorder.dll avast! snx Border

ALWIL Software

The only way to test is to somehow disable these modules or uninstall the ALWIL software. I doubt the warning is of that much concern, but feel free to check the behavior with those modules disabled/uninstalled if you care.  It is a warning, and not an error.

http://social.answers.microsoft.com/Forums/en/w7performance/thread/fdbd5b60-9d86-42d2-99b5-600e8ed57545

 

---

Teching It Easy: With Windows	ActiveWin

 

No, I don't use AVAST. But I was using AVG Free and in the friendly XML view of the Winint warning AVG was listed. I since uninstalled AVG Free but I still get the warning. AVG is not listed in the friendly view now.