Event log warnings concerning Diskeeper 2010

[ghost446]

Hello,
I've been searching for an answer on Google and throughout many forums but I couldn't seem to find one so I figured I'd just ask here as this seems to be a good source of knowledge. I noticed numerous warnings in my event log concerning Diskeeper 2010 (I'm using Build:14.0.896.0) that state:

Category : 0
CategoryString :
EventCode : 1530
EventIdentifier : 1530
EventType : 2
Logfile : Application
Message : Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. DETAIL - 20 user registry handles leaked from \Registry\User\S-1-5-21-3913409669-960638304-123155719-1001:
Process 3416 (\Device\HarddiskVolume1\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe) has opened key \REGISTRY\USER\S-1-5-21-3913409669-960638304-123155719-1001


It goes on to list all the other keys Diskeeper has opened as well. On a whim, I wrote to Diskeeper tech support and asked them to explain and their reply was:

"Thank you for contacting us in regards to your Diskeeper software.
The registry activity noted in your email is not typical of Diskeeper software. This activity is quite suspicious and resembles the work of third-party malware which could be causing the DKService to unnecessarily access and hold on to registry keys.
The only advice we would be able to offer is to run a full system scan using a scanner that is not compromised on your system in order to determine the cause of the Event Log Warnings regarding the DKService and the registry keys listed."
Thank you,
Jun Dockins
Technical Support Rep.
Diskeeper Corporation

Now, I feel certain that I don't have malware on my system. I'm running Kaspersky 2010 and use Malwarebyte's Anti-Malware as a backup. I scan regularly and also keep tabs on all active outbound connections. I've scanned and scanned and they're always clean. I've tried multiple rootkit scanners, online scanners and just about everything else you could try. I just can't find anything wrong. I also get a warning concerning Wininit that states "Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications." Has anyone else seen this or does anyone have any ideas on what may be happening?

 

[seekermeister]

Despite Diskeeper's response, have you tried reinstalling the program? If they are right and the problem is caused by something else, the problem might return, but then perhaps not.

EDIT: I'm not familiar with Diskeeper, but I'm wondering if it has a background defrag function that is working in the background and is causing the error.

 

[ghost446]

Thanks for the quick reply!! I did just find an update for my version. I installed that so I'm going to see if that makes any difference first. If not, I'll try re-installing the whole thing.

Any ideas on the "Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications." warning? That one really has me wondering. I have seen a few posts on various forums that claim that it's by design in 7. I might shoot an email to Microsoft and see what they say.

 

[seekermeister]

Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications.

I'm trying to think where is have seen that before. Isn't that part of the message given for an unsigned driver? If so, I would think that the program may not be totally compatible with Windows 7. Looking at the tech specs, it says that it will run on Windows 7, but that doesn't mean that it is actually compatible.

I use O&O Defrag, mostly because I prefer the way that it work, but their newest version is supposed to be compatible with W7, even though prior versions would run. It doesn't relate to your question, but when I asked their tech support about this, they said that the difference is because the new version defrags via zones, which the earlier versions didn't.

 

[ghost446]

Well, if I don't get the registry issue resolved with Diskeeper, I will be looking for another defrag utility. I guess I mainly want to know if the warnings are something to really be concerned with or not. I was really hoping that DK tech support was going to say that it's just the way the software operates and nothing to be concerned with but, that wasn't the case. Again, I see no performance issues or anything else out of the ordinary but I know that doesn't mean everything is automatically ok. I know from browsing Google/other forums that other people are seeing the same error but they're caused by different apps in each case. There just doesn't seem to be a standard resolution yet.

As far as the dll issue, I always try to verify that what I put on the drives is compatible with 7 and the 64bit OS. I only have one piece of software (NFS Carbon) running in compatibility mode right now. The error is so vague that I can't narrow it down to the exact cause and that is what is driving me nuts! I try to address all issue as they appear in the logs and usually it's pretty straightforward but this one has me stumped for right now.

 

[ghost446]

Well, I tried re-installing DK and I still get the same error log entries. I'm starting to wonder if it might be happening because DK is trying to do its thing and Kaspersky is running a rootkit scan or something else in the background. Anybody have any thoughts?

 

[ghost446]

Does anybody else here running Diskeeper 2010 have any entries like the ones I'm seeing in their error logs? Anyone?

 

[Jacee]

I don't use Diskeeper, so I'm not informed enough about the software error.

Uninstall Diskeeper and install ATF Cleaner ATF-Cleaner.exe - www.atribune.org
Click "Main" > check 'select all' (except "Prefetch") this first time using it, then click "Empty Selected". Do the same for FireFox or Opera if you use either of those browsers.
Next, go to Control Panel > Internet Options.
On the General tab under "Temporary Internet Files" Click "Delete Files".
Put a check by "Delete Offline Content" and click OK.

 

[starfox101]

Does anybody else here running Diskeeper 2010 have any entries like the ones I'm seeing in their error logs? Anyone?

I am also getting the errors with diskeeper 2010. Just did a clean install of win 7 64, I think the first program I installed was diskeeper, same errors. Very long list of errors.

 

[seekermeister]

Perhaps it's time to consider a different defrag program to use.

 

[ghost446]

That's an option (replacing DK) I'm starting to look at. I would really like to get the issue resolved with DK as I do like the way it works. I sent DK tech support another email and told them that there is no malware on my system so the issue lies elsewhere. I'm still waiting to hear back from them. At least now that there is someone else seeing the same thing, my claim has a little more validity. I just wonder how many other people who are running DK, but don't know they have the issue because they don't check their logs, are out there. If there were more of us, we could certainly push the issue better...

 

[stinman]

It is Kaspersky 2010 who is at fault not DK

Don't get rid of it,i got Perfect Disk 10 pro and get the same warnings,I also get these warnings for the assessment tool in Windows Ultimate 7 64bit and in 32bit also.So I have found out the problem lies with Kaspersky 2010.It is talked about on there forums,I haven't found any answers.Mainly it is because Kaspersky will not let any defrag program touch their files in the Program files folder.It really won't hurt anything,it is just annoying to see this everytime you go to event log.I have investigated this for a long time now.So keep your defrag program it is one of the VERY best.Those warnings will not affect your system
stinman

 

[seekermeister]

Don't get rid of it,i got Perfect Disk 10 pro and get the same warnings,I also get these warnings for the assessment tool in Windows Ultimate 7 64bit and in 32bit also.So I have found out the problem lies with Kaspersky 2010.It is talked about on there forums,I haven't found any answers.Mainly it is because Kaspersky will not let any defrag program touch their files in the Program files folder.It really won't hurt anything,it is just annoying to see this everytime you go to event log.I have investigated this for a long time now.So keep your defrag program it is one of the VERY best.Those warnings will not affect your system
stinman

Hmm, I assme that you are saying that the firewall of Kaspersky is causing the issue. If it is preventing a defragger from accessing anything in the Program Files folder, I would seem to me that it is defeating the purpose of the defragger, since the majority of fragmentation will occur there. If that is so, it is Kaspersky that I would get rid of, instead of DK.

EDIT: Or are you saying that it is preventing access to it's own program directory? My firewall has certain file protection, but only locks certain critical files, not the entire program directory, and I don't think that it is generating any Event Viewer errors, although the defragger does make note of this in it's own log.

 

[ghost446]

I had looked for answers on the Kaspersky forum some time ago but didn't see anything mentioned. I'll have to keep my eye open for an answer over there as well. In the back of my mind, I had the feeling KAS 2010 was involved in some way, just couldn't link the two together.

I never did get a reply to my last email to DK tech support. I wish they would have least sent a "Sorry, you're on your own" type response instead of just ignoring me. That kinda sucks.

 

[kncowans]

Hello

Not much help but I can confirm DK10 works fine without any errors on both my machines here, x86 and x64.

I use ESET Nod32 VC.

Bye for now

Kevin

 

[starfox101]

ghost446 I am also still having the problem. I don't use a software firewall. Not long ago I did a fresh install, after reading your post about software causing the problem. First non windows program I installed was dk, Problem was in the log!
I had posted earlier that I'd found the problem, had to come back and delete the post. I see both of us has an ausu board, are you running raid? I had found a program installed by asus software in the task scheduler, thought that was it, I was wrong so I had to delete the post.

 

[seekermeister]

ghost446,

I wish they would have least sent a "Sorry, you're on your own" type response instead of just ignoring me. That kinda sucks.

As far as I'm concerned, the greatest offense that any company can commit against their customers is to ignore them. I don't care whether a question is pre sales, warranty or anywhere between, they should, at the very least, rapidly acknowledge, and within a reasonable time, respond to questions with either a solution, help to search for a solution or a disclaimer of the issue being caused by their product. I don't care how good their product is, if they don't support it in this fashion, I try to find the next best brand that does.

EDIT: I take that back, there is a greater offense, being that when contacted about an issue, that they respond with sarcasm and denigrating comments, like I had happen with Entech's Powerstrip response some time ago.

 

[stinman]

I had looked for answers on the Kaspersky forum some time ago but didn't see anything mentioned. I'll have to keep my eye open for an answer over there as well. In the back of my mind, I had the feeling KAS 2010 was involved in some way, just couldn't link the two together.

I never did get a reply to my last email to DK tech support. I wish they would have least sent a "Sorry, you're on your own" type response instead of just ignoring me. That kinda sucks.

they say it is normal at KAS forum,look for my post stin.As of yesterday 2 14 10.It is like windows is telling you,hey if you don't know why this is happening then you better look in to it.This is the best LAYMANS turn I can give.It is a warning not an error.If you are getting the samething as I am.

 

[stinman]

Don't get rid of it,i got Perfect Disk 10 pro and get the same warnings,I also get these warnings for the assessment tool in Windows Ultimate 7 64bit and in 32bit also.So I have found out the problem lies with Kaspersky 2010.It is talked about on there forums,I haven't found any answers.Mainly it is because Kaspersky will not let any defrag program touch their files in the Program files folder.It really won't hurt anything,it is just annoying to see this everytime you go to event log.I have investigated this for a long time now.So keep your defrag program it is one of the VERY best.Those warnings will not affect your system
stinman

Hmm, I assme that you are saying that the firewall of Kaspersky is causing the issue. If it is preventing a defragger from accessing anything in the Program Files folder, I would seem to me that it is defeating the purpose of the defragger, since the majority of fragmentation will occur there. If that is so, it is Kaspersky that I would get rid of, instead of DK.

EDIT: Or are you saying that it is preventing access to it's own program directory? My firewall has certain file protection, but only locks certain critical files, not the entire program directory, and I don't think that it is generating any Event Viewer errors, although the defragger does make note of this in it's own log.

Not the firewall,it is the self protection.But again it is a warning,Windows warns everything,sometimes it is just a normal procedure and windows will warn you.I have been investigating this warning for about,I don't know,since 7 came out.It also had something to do with the windows rating assessment also.Kaspersky 2010 at one time before the 736 update was blocking windows from rating your pc.It also gave this type of warning.I have not got rid of Kas and would not because my pc is doing fine and kas is one of the top 5 virus programs you can get.I gave up worring about this.So in essence keep both,they are top programs,plus they were not free .Warnings don't always mean failure,they just mean "look in to it" and we have.We know it is not malware,it has not made our pc's go capluy,All it's gonna do is write that warning everyday until it writes over it self.It is dumb though,ya know?
stin

 

[ghost446]

ghost446 I am also still having the problem. I don't use a software firewall. Not long ago I did a fresh install, after reading your post about software causing the problem. First non windows program I installed was dk, Problem was in the log!
I had posted earlier that I'd found the problem, had to come back and delete the post. I see both of us has an ausu board, are you running raid? I had found a program installed by asus software in the task scheduler, thought that was it, I was wrong so I had to delete the post.

So, you're seeing the same warnings but without KAS 2010 on your system? That's interesting. Also, I'm not using RAID...yet!

Stinman - I'm gonna check out your post over at the KAS forum. I would think that by DK having full rights (trusted) under application control, KAS would let it do it's thing. I do know what you mean about them just being warnings though. Much like you, my system runs just fine. When I think about all the new versions of rootkits, malware, etc. that come out every day, I feel you just can't be too careful. That's why I'm in there looking at logs and everything else. I try not to put myself in situations where I'll be exposed to the stuff in the first place but I do spend some quality time on Usenet so I'm extra careful. What I wish I could stop, is the paranoia that kicks in when I read about some new threat, especially the rootkits. I've installed a few different ones on an old system in my little test network just to see what you could do with them and I must say, that they're quite impressive.

seekermeister - I agree totally with your opinion on the customer service issue. What makes its worse, is that DK is not cheap by any means, especially when compared to other products out there. For what you pay, you expect a certain level of support and in my opinion, it's just not there with DK. I'll think twice before recommending them to anyone or giving them my repeat business.