Registry leaks possible solution?

[Jackal]

Occasionally i take the time to view my event logs and try to resolve errors.

I came across a registry leak which viewed

(\Device\HarddiskVolume1\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-XXXXXX-XXXXX-XXXXXX-1001\Software\Microsoft\SystemCertificates\Disallowed


so i did some digging and tried to figure out why isnt the registry successfully closing itself on shutdown?

i did some research and came across
"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\NetCache\PurgeAtNextLogOff"

Im not EXACTLY sure how this registry works, and what repercussions (if any) would happen by doing this.

i created a string value with the SID in the event log (i.e S-1-5-21-XXXXXX-XXXXX-XXXXXX)
and now i get no registry leaks.


Does anyone know exactly what this registry does specifically? i believe it has something to do with offline files.

 

[Ztruker]

Why do you say it's not closing on shutdown? Nothing in what you posted shows that.

 

[Jackal]

Why do you say it's not closing on shutdown? Nothing in what you posted shows that.

i should have posted the entire event
the event log was stating i was leaking registrys on log off
so it seems reasonable to think they werent closing properly.

 

[Ztruker]

Please post the event so we can see it all, thanks.