Repeated Events warning re something open in my registry file


  1. Posts : 46
    Win 7 64 Prof
       #1

    Repeated Events warning re something open in my registry file


    I can only provide information because I don't understand this. However, it's a repeated events warning and I have been painstakingly dealing with many problems on this computer for many months. With a lot of help from this forum I feel like I'm almost home but this repeated message doesn't sound "right". And I am still living with "this program has stopped responding" although it now seems limited to Outlook 2010 rather than all MS programs.

    Win 7 Prof 64 bit SP1 up to date. Cable modem bought myself Motorola Surfboard newest model. Apple Extreme router. I frequently use DNS other than those provided by my ISP for obvious reasons :)

    Run Eset NOD and MBam as well as windows firewall. I also have five hard drives on the system all of which test ok. Two SSDs and three WD black caviars.

    Here is the full copy of the "warning" - several times a day:

    Code:
    Log Name:      Application
    Source:        Microsoft-Windows-User Profiles Service
    Date:          12/13/2012 1:58:11 AM
    Event ID:      1530
    Task Category: None
    Level:         Warning
    Keywords:      
    User:          SYSTEM
    Computer:      mg-PC
    Description:
    Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.  
    
     DETAIL - 
     1 user registry handles leaked from \Registry\User\S-1-5-21-3328621373-938311138-4019764245-1001:
    Process 740 (\Device\HarddiskVolume1\Windows\System32\winlogon.exe) has opened key \REGISTRY\USER\S-1-5-21-3328621373-938311138-4019764245-1001
    
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" />
        <EventID>1530</EventID>
        <Version>0</Version>
        <Level>3</Level>
        <Task>0</Task>
        <Opcode>0</Opcode>
        <Keywords>0x8000000000000000</Keywords>
        <TimeCreated SystemTime="2012-12-13T06:58:11.198177600Z" />
        <EventRecordID>118456</EventRecordID>
        <Correlation />
        <Execution ProcessID="420" ThreadID="3584" />
        <Channel>Application</Channel>
        <Computer>mg-PC</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <EventData Name="EVENT_HIVE_LEAK">
        <Data Name="Detail">1 user registry handles leaked from \Registry\User\S-1-5-21-3328621373-938311138-4019764245-1001:
    Process 740 (\Device\HarddiskVolume1\Windows\System32\winlogon.exe) has opened key \REGISTRY\USER\S-1-5-21-3328621373-938311138-4019764245-1001
    </Data>
      </EventData>
    </Event>
    I hope this is the correct information to provide and would appreciate any and all suggestions/recommendations.

    Madeline
      My Computer


  2. Arc
    Posts : 35,373
    Microsoft Windows 10 Pro Insider Preview 64-bit
       #2

    CAUSE
    This behavior occurs because Windows automatically closes any registry handle to a user profile that is left open by an application. Windows Vista does this when Windows Vista tries to close a user profile.

    Note Event ID 1530 is logged as a Warning event. The application that is listed in the event detail is leaving the registry handle open and should be investigated.

    STATUS
    This behavior is by design.
    Source: Event ID: 1530 may be logged in the Application log on a Windows Vista or newer computer

    In this care, the application is winlogon.exe.

    To fix it, first try SFC /SCANNOW : Run in Command Prompt at Boot .

    If still it occurs ... go for a Repair Install.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 02:54.
Find Us