Is there any way to tell who is accessing the registry?

This error is logging while you log off, right?

So you need to restart twice to check because , first time you restart you will be booting into windows with only Microsoft services. Since that warning is happening at your log off, the message will be there by previous log off with all the service enabled.

so you have to restart again with other services disabled, and check. time relating to the second restart.

Post back the results :)

squonksc said:

Man, you're getting good at this.

It's not the printer either!

I will go back a few GHOST image and will post back...I need a break, lol!

ben07 said:

It's not the printer either!

I will go back a few GHOST image and will post back...I need a break, lol!

Me too. lol

You deserve some rep for your stamina and self initiative. so +1

I have to get some groceries, see you in about an hour.

Greetz

Delphin said:

This error is logging while you log off, right?

So you need to restart twice to check because , first time you restart you will be booting into windows with only Microsoft services. Since that warning is happening at your log off, the message will be there by previous log off with all the service enabled.

so you have to restart again with other services disabled, and check. time relating to the second restart.

Post back the results :)

Hi Delphin,

Thanks for the help. Very much appreciated.
I repped you too.

We will take a short recess.

If you have more ideas on this issue, keep it coming.

Thanks

Delphin said:

This error is logging while you log off, right?

So you need to restart twice to check because , first time you restart you will be booting into windows with only Microsoft services. Since that warning is happening at your log off, the message will be there by previous log off with all the service enabled.

so you have to restart again with other services disabled, and check. time relating to the second restart.

Post back the results :)

Son of *&*^%$%#@, I must be retarded....yeah Delphin "Guru", NO more yellow warnings.

I'm sure now it must be one of four NON MS startup or one of the three NON MS services. I deselected all seven at once (2 steps in one)...

1st reboot - still there
2nd reboot - no more
3rd reboot - no more
4th reboot - no more

Now it's easy to isolate, cause it's only 7 items...I mentioned earlier could be the ATI/AMD driver, cause it's the only thing new in Windows 7 and never existed in my the other two XP SP3.

Thank you for all your help/feedback and I will sure to post back the culprit.

squonksc will be happy to read this when he returns from his grocery shopping, lol!

Thanks again Guru Delphin

Good to hear this lol.

Let me know the culprit.

good luck

Hi Delphin, it's 100% AMD External Events Utility at C:\Windows\System32\atiesrxx.exe, dunno what this thing does, but I changed it to "Disabled" from "Automatic" in Services and nada yellow warning anymore, tested 3 times.

Thanks again guys, we all need a rest, lol.

Glad you fixed it :)

I'm going to bed now. Its 9 pm here

Hi Ben,

Really glad it's fixed.

Thank you Delphin, for pushing us in the right direction.
(and sleep tight you early bird. lol)

One is never too old to learn.

And Ben, stick around this forum, you have what it takes to be of help here.

You handled this very well, and made it easy for us to help you.

Some final info on the culprit service, found this:

atievxx.exe description
Descriptionatievxx.exe is installed alongside some ATI graphics hardware products and assists with graphics handling. "This program is a non-essential system process, but should not be terminated unless suspected to be causing problems."