Event ID: 12003

The registry value %1 in key HKLM\%2 changed from "%3" to "%4". All files specified in this value will be automatically run when a user logs into the system.

Currently logged on user(s): %5