Author Topic: EventID 11 ;guard32.dll String acaptuser32.dll  (Read 2499 times)

Offline notechyet

  • Newbie
  • *
  • Posts: 6
EventID 11 ;guard32.dll String acaptuser32.dll
« on: June 16, 2012, 04:21:47 PM »
Hi All
I have a problem in the eventviewer and it relates to the installed firewall;
+ System

  - Provider

   [ Name]  Microsoft-Windows-Wininit
   [ Guid]  {206F6DEA-D3C5-4D10-BC72-989F03C8B84B}
 
   EventID 11
 
   Version 0
 
   Level 3
 
   Task 0
 
   Opcode 0
 
   Keywords 0x4000000000000000
 
  - TimeCreated

   [ SystemTime]  xx
 
   EventRecordID 23379
 
   Correlation
 
  - Execution

   [ ProcessID]  440
   [ ThreadID]  464
 
   Channel System
 
   Computer xx
 
  - Security

   [ UserID]  S-1-5-18
 

- EventData

  StringCount 2
  String C:\Windows\system32\guard32.dll
  String acaptuser32.dll

Would someone be able to give a hand to solve this?

Thanks

Offline kail

  • Mostly Benevolent
  • Global Moderator
  • Comodo's Hero
  • *****
  • Posts: 11277
  • The future is much like the present, only longer.
    • COMODO's free software!
Re: EventID 11 ;guard32.dll String acaptuser32.dll
« Reply #1 on: June 16, 2012, 05:10:19 PM »
It's not a "problem" as such. Event 11 is just a warning that a DLL is being globally injected by using the "AppInit" method, something that Microsoft no longer recommends and thus warns about.

GUARD32.DLL is part of CIS and ACAPTUSER.DLL is part of Adobe's 3D Capture, they're not related.
My System Details: W8Px64 with CIS 6, Firefox 26 & Becky! 2.65
Forum Policy.
____
The problem is not the problems, the problem is people's attitude towards those problems.

Offline notechyet

  • Newbie
  • *
  • Posts: 6
Re: EventID 11 ;guard32.dll String acaptuser32.dll
« Reply #2 on: June 16, 2012, 05:41:29 PM »
It's not a "problem" as such...., they're not related.
Thanks for your prompt reply, very much appreciated.
Is there a way to turn this off somewhere?

Offline EricJH

  • Global Moderator
  • Comodo's Hero
  • *****
  • Posts: 19903
Re: EventID 11 ;guard32.dll String acaptuser32.dll
« Reply #3 on: June 16, 2012, 06:12:24 PM »
You can disable it somewhere.

When disabling the injection of guard32.dll you will get more alerts from CIS.

What is having you worried about the event being logged by Windows?

Offline notechyet

  • Newbie
  • *
  • Posts: 6
Re: EventID 11 ;guard32.dll String acaptuser32.dll
« Reply #4 on: June 16, 2012, 06:15:47 PM »
You can disable it somewhere.

When disabling the injection of guard32.dll you will get more alerts from CIS.

What is having you worried about the event being logged by Windows?
Just the fact of having an error in the event viewer and possible slow downs on boot-up?

Offline EricJH

  • Global Moderator
  • Comodo's Hero
  • *****
  • Posts: 19903
Re: EventID 11 ;guard32.dll String acaptuser32.dll
« Reply #5 on: June 16, 2012, 06:22:49 PM »
I seriously doubt that would slow down boot performance.

Offline notechyet

  • Newbie
  • *
  • Posts: 6
Re: EventID 11 ;guard32.dll String acaptuser32.dll
« Reply #6 on: June 16, 2012, 07:01:25 PM »
Thanks. I'll consider this solved.

 

Seo4Smf 2.0 © SmfMod.Com Smf Destek