Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Repeated Events warning re something open in my registry file

13 Dec 2012   #1
mlg3000

Win 7 64 Prof
 
 
Repeated Events warning re something open in my registry file

I can only provide information because I don't understand this. However, it's a repeated events warning and I have been painstakingly dealing with many problems on this computer for many months. With a lot of help from this forum I feel like I'm almost home but this repeated message doesn't sound "right". And I am still living with "this program has stopped responding" although it now seems limited to Outlook 2010 rather than all MS programs.

Win 7 Prof 64 bit SP1 up to date. Cable modem bought myself Motorola Surfboard newest model. Apple Extreme router. I frequently use DNS other than those provided by my ISP for obvious reasons

Run Eset NOD and MBam as well as windows firewall. I also have five hard drives on the system all of which test ok. Two SSDs and three WD black caviars.

Here is the full copy of the "warning" - several times a day:

Code:
Log Name:      Application
Source:        Microsoft-Windows-User Profiles Service
Date:          12/13/2012 1:58:11 AM
Event ID:      1530
Task Category: None
Level:         Warning
Keywords:      
User:          SYSTEM
Computer:      mg-PC
Description:
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.  

 DETAIL - 
 1 user registry handles leaked from \Registry\User\S-1-5-21-3328621373-938311138-4019764245-1001:
Process 740 (\Device\HarddiskVolume1\Windows\System32\winlogon.exe) has opened key \REGISTRY\USER\S-1-5-21-3328621373-938311138-4019764245-1001

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" />
    <EventID>1530</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2012-12-13T06:58:11.198177600Z" />
    <EventRecordID>118456</EventRecordID>
    <Correlation />
    <Execution ProcessID="420" ThreadID="3584" />
    <Channel>Application</Channel>
    <Computer>mg-PC</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData Name="EVENT_HIVE_LEAK">
    <Data Name="Detail">1 user registry handles leaked from \Registry\User\S-1-5-21-3328621373-938311138-4019764245-1001:
Process 740 (\Device\HarddiskVolume1\Windows\System32\winlogon.exe) has opened key \REGISTRY\USER\S-1-5-21-3328621373-938311138-4019764245-1001
</Data>
  </EventData>
</Event>
I hope this is the correct information to provide and would appreciate any and all suggestions/recommendations.

Madeline


My System SpecsSystem Spec
.
13 Dec 2012   #2
Arc

Microsoft Community Contributor Award Recipient

Microsoft Windows 10 Pro Insider Preview 64-bit
 
 

Quote:
CAUSE
This behavior occurs because Windows automatically closes any registry handle to a user profile that is left open by an application. Windows Vista does this when Windows Vista tries to close a user profile.

Note Event ID 1530 is logged as a Warning event. The application that is listed in the event detail is leaving the registry handle open and should be investigated.

STATUS
This behavior is by design.
Source: Event ID: 1530 may be logged in the Application log on a Windows Vista or newer computer

In this care, the application is winlogon.exe.

To fix it, first try SFC /SCANNOW : Run in Command Prompt at Boot .

If still it occurs ... go for a Repair Install.
My System SpecsSystem Spec
Reply

 Repeated Events warning re something open in my registry file




Thread Tools





Similar help and support threads
Thread Forum
Open File - Security Warning : Unblock File
How to Unblock a File to Stop "Open File - Security Warning" and "Windows 8 SmartScreen" Prompt This will show you how to unblock a file that you have downloaded or copied from the internet or external source to no longer get the "Open File - Security Warning" or "Windows 8 SmartScreen" prompt...
Tutorials
Open File - Security Warning : Allow or Prevent to Unblock File
Allow or Prevent to Unblock a File to Stop the "Open File - Security Warning" Prompt This will show you how to allow or prevent all users from being able to stop the Open File - Security Warning prompt by removing the unblock button and Always ask before opening this file check box for a...
Tutorials
Open File Security Warning: Why?
I recently installed a new copy of Windows 7 Ultimate (64-bit) on a friends computer. I've done that setup already quite a lot so all went fine. But when delivering the computer he asked to move his user files (or better, the store location) directly to a backup drive. No problem, i do this on my...
System Security
Open-file-security-warning
Re-installed W7 OS Applied all driver updates to ASUS MB .. One of these throws up a window on every boot up ... "Open-File Security warning" Then a normal path and option to run or cancel ... Not sure exactly which file .. but path commence with : C:\Program Files (x86)\Intel\Intel(R)...
System Security
Open File Security Warning when file is on different local hard drive
Hello and this is my First Post Can you help me with an annoying dialog that pops up when running shortcuts please? I have (portable) applications located on E: I can run those applications directly from E: without a problem - i.e. I don't get any warnings. However if I create a...
System Security
Open File - Security Warning
Open File - Security Warning: Do you want to open this file? Publisher: Unknown Publisher (they're joking, right?) Type: Shortcut ("C:\Program Files (x86)\Internet Explorer\iexplore.exe") This is the pop-up warning I get when I open the IE icon in my Links on the Taskbar. I created the...
System Security

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 04:06.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App