Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: 0 user registry handles leaked ?

1 Week Ago   #1

Win 7 64bit Pro
0 user registry handles leaked ?

Hi Everyone,

Normally there is a thread or forum somewhere online i can figure out problems or solutions but this one has me stumped.

I have checked PC for malware etc and all has come up fine but i seem to get this error after every shutdown of my PC i have kind of ignored it a little as it doesn't show its leaking any program but there must be a cause to it as i don't have it on any other computer.

I tried doing a clean boot and the usual closing of programs etc but it still appears the only thing i noticed was if i created a new user when logging off or shutting down from new one it didnt appear but as soon as i copied my appdata folder from other over it appeared again so i am guessing its something probally in here but i cannot see anything.

Was wondering if there was anyone on here who had similar problem or could help.



- <Event xmlns="">
- <System>
<Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" />







<TimeCreated SystemTime="2019-01-08T14:16:28.934802700Z" />


<Correlation />

<Execution ProcessID="688" ThreadID="1820" />



<Security UserID="S-1-5-18" />


- <EventData Name="EVENT_HIVE_LEAK">
<Data Name="Detail">0 user registry handles leaked from \Registry\User\S-1-5-21-4158718855-2632634187-736545407-1000_Classes:</Data>



My System SpecsSystem Spec
1 Week Ago   #2
wither 2

Windows 7 Pro SP1 64 bit

Hi Bugsy2019-

This is an old blog but it's about the most comprehensive one I can find on this issue. Doesn't really tell one to figure out which application is causing the problem.-

Event ID:1530 -Microsoft-Windows-User Profiles - Microsoft Community

Hopefully, someone else will jump on this.
My System SpecsSystem Spec
1 Week Ago   #3

W7 home premium 32bit/W7HP 64bit/w10 tp insider ring

Hi Mark,,

I know its only a warning - but thier annoying.

To get you a bit farther on -
Its usually a background task still running, after you've changed user.

As process ID's and threadID's are fluid you need upto date session info

IMMEDIATELY prior to closing down
open task manager - Services tab, copy paste the info

then after you have rebooted check your 1530 event log for the PID

My System SpecsSystem Spec

6 Days Ago   #4

Win 7 64bit Pro

In reply to wither 2 - Yeah i found this page also it was only one i could find that seemed to have the same problem but with no solutions all others that i found had 1 or more registry leaks and listed programs.

In reply to torchwood - I have attached a image below showing what processes it is linked to not sure if this will help at all gonna have a look into each one see if there's anything.

Attached Thumbnails
0 user registry handles leaked ?-capture.png  
My System SpecsSystem Spec
6 Days Ago   #5
wither 2

Windows 7 Pro SP1 64 bit

Does this problem occur before the user is logged off? Just asking because, if it's before log off, you might be able to get something from the event viewer.
My System SpecsSystem Spec
6 Days Ago   #6

Win 7 64bit Pro

Nope it happens when i restart or shutdown but it must do it as its going off as the time it gives. The details above are also from event viewer.

I had a look at each process shown but none really give me any more light on what is happening it appears as if its just logging but there's nothing actually being closed as all other people with same problem it lists a application its never 0

Its certainly has me baffled at moment
My System SpecsSystem Spec
6 Days Ago   #7

W7 Ultimate SP1, LM18.3 MATE, W10 Home, #All 64 bit

I have that event in my Event Viewer, but in my case it seems that the culprit is Avast.
My System SpecsSystem Spec
5 Days Ago   #8

Win 7 64bit Pro

Yeah Apparently avast and Kaspersky seem to cause the error for most from research but it will say minimum 1 memory leak or more where as this i get says 0 which seems to be extremely rare and unknown from what i can tell.

Also never used avast or Kaspersky always been ms essentials
My System SpecsSystem Spec
5 Days Ago   #9
wither 2

Windows 7 Pro SP1 64 bit

When you ran the clean boot, did you shut the system down leaving it in the clean boot mode?
My System SpecsSystem Spec
5 Days Ago   #10

Win 7 64bit Pro

I wasnt sure to be honest so ive just done that as i couldn't remember if i left it on after then restarting but i set it to clean boot left it on so it restarted to another clean boot and it still appears
My System SpecsSystem Spec

 0 user registry handles leaked ?

Thread Tools

Similar help and support threads
Thread Forum
Repair registry of one user from another
Hi, I've made a newbie mistake and make changes to registry from one of the users of my desktop (Windows 7) without making a backup first. Basically the change was adding to HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies a new keys for DisallowRun and DisableRun (following...
Backup and Restore
Hide user by registry stange problem: User still appears in C folder
Hi! I did an new install of windows 7 (home first then upgraded to pro) I want to hide a user by doing this on the registry: HKEY_LOCAL_MACHINE \SOFTWARE \Microsoft \Windows NT \CurrentVersion \Winlogon \SpecialAccounts\ UserList ..then add dword32 by my username value to 0 I did this on my old...
General Discussion
Registry location that handles log on screen
I have some pesky co-workers who like torturing me via the remote shutdown commands, and because of Group Policy here at work I cannot go to Windows Settings > Security Settings > Local Policies > User Rights Assignments: and administratively remove the "admin" from "force shutdown from a remote...
General Discussion
User registry handles leaked when shutting down Win 7 Ultimate
I have over 630 events logged in less than a year on my Win 7 Ultimate (64bit) which is basically turned one and off twice per day, all stating that my registry is leaking. Each shut down produces a 1530 event message like this below... Windows detected your registry file is still in use by...
General Discussion
Event ID: 1530 15 user registry handles leaked - WLIDSVC.EXE
I notice that when I have Windows Live applications installed, event viewer always produces the text below. This goes away if I uninstall Windows Live software and happened again on a fresh installation of Windows, so I am pretty sure it has something to do with the software specifically...

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 03:58.
Twitter Facebook Google+