IT Toolbox
Menu
HomeEvent ID 7045 — New service installed
Guide

Event ID 7045 — New service installed

A new Windows service has been registered

TopicIT resources → About 1 min read

A new Windows service has been registered.

Source of event

Service Control Manager — Services category.

Possible causes

  • Software installation
  • Agent or pilot
  • Persistence mechanism

Verifications to be carried out

  1. Identify Service Name and ImagePath
  2. Check the file editor
  3. Compare to Security 4697 event

Commands

Get-WinEvent -FilterHashtable @{LogName='System'; Id=7045} -MaxEvents 20

Key takeaways

An Event ID must always be interpreted with its source, its full message, its timing and the context of the system. The same number may exist in several providers of events.

Support the development of BAOI Hosting, domains and new IT resources.
❤️ Support BAOI

My favorites