Event ID: 1530 15 user registry handles leaked - WLIDSVC.EXE


  1. frozenreads
    Posts : 32
    Windows 7 64bit Home Premium
       New #1

    Event ID: 1530 15 user registry handles leaked - WLIDSVC.EXE


    I notice that when I have Windows Live applications installed, event viewer always produces the text below.
    This goes away if I uninstall Windows Live software and happened again on a fresh installation of Windows, so I am pretty sure it has something to do with the software specifically WLIDSVC.EXE. Out of the Windows Live applications I installed, Mail, Photo Gallery and Movie Maker.

    Any thoughts about this message, and anything to worry about?

    System: Windows 7 64bit Home Premium, i7 930 @4.0ghz, 12gb Mushkin Memory, GTX580
    ----------------------------------------------------------------------------------------------
    Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.

    DETAIL -
    15 user registry handles leaked from \Registry\User\S-1-5-21-3190769494-2846552825-950423142-1001:
    Process 1992 (\Device\HarddiskVolume1\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-3190769494-2846552825-950423142-1001
    Process 1992 (\Device\HarddiskVolume1\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-3190769494-2846552825-950423142-1001
    Process 1992 (\Device\HarddiskVolume1\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-3190769494-2846552825-950423142-1001
    Process 1992 (\Device\HarddiskVolume1\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-3190769494-2846552825-950423142-1001
    Process 1992 (\Device\HarddiskVolume1\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-3190769494-2846552825-950423142-1001\Software\Policies\Microsoft\SystemCertificates
    Process 1992 (\Device\HarddiskVolume1\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-3190769494-2846552825-950423142-1001\Software\Policies\Microsoft\SystemCertificates
    Process 1992 (\Device\HarddiskVolume1\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-3190769494-2846552825-950423142-1001\Software\Policies\Microsoft\SystemCertificates
    Process 1992 (\Device\HarddiskVolume1\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-3190769494-2846552825-950423142-1001\Software\Policies\Microsoft\SystemCertificates
    Process 1992 (\Device\HarddiskVolume1\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-3190769494-2846552825-950423142-1001\Software\Microsoft\SystemCertificates\TrustedPeople
    Process 1992 (\Device\HarddiskVolume1\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-3190769494-2846552825-950423142-1001\Software\Microsoft\SystemCertificates\Root
    Process 1992 (\Device\HarddiskVolume1\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-3190769494-2846552825-950423142-1001\Software\Microsoft\SystemCertificates\My
    Process 1992 (\Device\HarddiskVolume1\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-3190769494-2846552825-950423142-1001\Software\Microsoft\SystemCertificates\CA
    Process 1992 (\Device\HarddiskVolume1\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-3190769494-2846552825-950423142-1001\Software\Microsoft\SystemCertificates\Disallowed
    Process 1992 (\Device\HarddiskVolume1\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-3190769494-2846552825-950423142-1001\Software\Microsoft\SystemCertificates\SmartCardRoot
    Process 1992 (\Device\HarddiskVolume1\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-3190769494-2846552825-950423142-1001\Software\Microsoft\SystemCertificates\trust
      My Computer
    Quote Quote

  3. Phone Man
    Posts : 2,686
    Windows 8.1 Pro w/Media Center 64bit, Windows 7 HP 64bit
       New #2

    I get the same thing at times. I use Windows Live Mail, Photo Gallery and Movie Maker but mostly use WLM. I don't worry about it and just ignore it.

    Jim
      My Computer
    Quote Quote

 

  Related Discussions
Event ID 1530 after installation question
in Performance & Maintenance

Good evening, Since a few month's ago i have been getting a few event ID 1530's in my eventviewer. These containing WmiPrvSE.exe, msiexec.exe, lsass.exe and wininit.exe I seem to get the WmiPrvSE.exe after i installed or updated something on EA's Origin and then reboot. The msiexec.exe...
I have some pesky co-workers who like torturing me via the remote shutdown commands, and because of Group Policy here at work I cannot go to Windows Settings > Security Settings > Local Policies > User Rights Assignments: and administratively remove the "admin" from "force shutdown from a remote...
I have over 630 events logged in less than a year on my Win 7 Ultimate (64bit) which is basically turned one and off twice per day, all stating that my registry is leaking. Each shut down produces a 1530 event message like this below... Windows detected your registry file is still in use by...
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

 © Designer Media Ltd
All times are GMT -5. The time now is 13:15.
Find Us