Repeated Events warning re something open in my registry file

mlg3000

New member
Member
Local time
1:56 AM
Messages
46
I can only provide information because I don't understand this. However, it's a repeated events warning and I have been painstakingly dealing with many problems on this computer for many months. With a lot of help from this forum I feel like I'm almost home but this repeated message doesn't sound "right". And I am still living with "this program has stopped responding" although it now seems limited to Outlook 2010 rather than all MS programs.

Win 7 Prof 64 bit SP1 up to date. Cable modem bought myself Motorola Surfboard newest model. Apple Extreme router. I frequently use DNS other than those provided by my ISP for obvious reasons :)

Run Eset NOD and MBam as well as windows firewall. I also have five hard drives on the system all of which test ok. Two SSDs and three WD black caviars.

Here is the full copy of the "warning" - several times a day:

Code:
Log Name:      Application
Source:        Microsoft-Windows-User Profiles Service
Date:          12/13/2012 1:58:11 AM
Event ID:      1530
Task Category: None
Level:         Warning
Keywords:      
User:          SYSTEM
Computer:      mg-PC
Description:
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.  

 DETAIL - 
 1 user registry handles leaked from \Registry\User\S-1-5-21-3328621373-938311138-4019764245-1001:
Process 740 (\Device\HarddiskVolume1\Windows\System32\winlogon.exe) has opened key \REGISTRY\USER\S-1-5-21-3328621373-938311138-4019764245-1001

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" />
    <EventID>1530</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2012-12-13T06:58:11.198177600Z" />
    <EventRecordID>118456</EventRecordID>
    <Correlation />
    <Execution ProcessID="420" ThreadID="3584" />
    <Channel>Application</Channel>
    <Computer>mg-PC</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData Name="EVENT_HIVE_LEAK">
    <Data Name="Detail">1 user registry handles leaked from \Registry\User\S-1-5-21-3328621373-938311138-4019764245-1001:
Process 740 (\Device\HarddiskVolume1\Windows\System32\winlogon.exe) has opened key \REGISTRY\USER\S-1-5-21-3328621373-938311138-4019764245-1001
</Data>
  </EventData>
</Event>

I hope this is the correct information to provide and would appreciate any and all suggestions/recommendations.

Madeline
 

My Computer My Computer

At a glance

Win 7 64 Profi7 93024 gig 1333HIS ATI Radeon HD 6850
Computer Manufacturer/Model Number
Desktop made to order - Asus P6x58D Premium
OS
Win 7 64 Prof
CPU
i7 930
Motherboard
Asus P6x58D Premium
Memory
24 gig 1333
Graphics Card(s)
HIS ATI Radeon HD 6850
Sound Card
Creative
Monitor(s) Displays
NEC Multisync P241W
Screen Resolution
1920 x 1200
Hard Drives
2 WD 1tb each black caviar
1 WD black caviar 2tb
1 Plextor SSD SATA 6 256 gig
1 Intel generation 2 SSD 160 gig
PSU
i7 930
Case
Antec 183 (?)
Cooling
Zalman fan and heat pipe
Keyboard
Goldtouch
Mouse
Logitech G 700 used wirelessly
Internet Speed
19.6 Mbps up and 2.00 Mbps down
Other Info
5 usb 3 hard drives used for backup. Until recently also backed up with Crashplan but discovered it was the cause of endless VSS errors and open programs stopping responding. HP Laserjet and large Epson inkjet for photography. Very old Epson Scanner. Cyberpower UPS.
CAUSE
This behavior occurs because Windows automatically closes any registry handle to a user profile that is left open by an application. Windows Vista does this when Windows Vista tries to close a user profile.

Note Event ID 1530 is logged as a Warning event. The application that is listed in the event detail is leaving the registry handle open and should be investigated.

STATUS
This behavior is by design.
Source: Event ID: 1530 may be logged in the Application log on a Windows Vista or newer computer

In this care, the application is winlogon.exe.

To fix it, first try http://www.sevenforums.com/tutorials/139810-sfc-scannow-run-command-prompt-boot.html .

If still it occurs ... go for a http://www.sevenforums.com/tutorials/3413-repair-install.html.
 

My Computer My Computer

At a glance

Microsoft Windows 10 Pro Insider Preview 64-bitIntel(R) Core(TM) i3-4130 CPU @ 3.40GHzCorsair Vengence 4GB x2 (8.00GB Dual-Channel ...2047MB GeForce GTS 450 (ZOTAC International)
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Self Assembled
OS
Microsoft Windows 10 Pro Insider Preview 64-bit
CPU
Intel(R) Core(TM) i3-4130 CPU @ 3.40GHz
Motherboard
Gigabyte Technology Co., Ltd. B85M-D3H
Memory
Corsair Vengence 4GB x2 (8.00GB Dual-Channel DDR3 @ 798MHz)
Graphics Card(s)
2047MB GeForce GTS 450 (ZOTAC International)
Sound Card
Onboard (Realtek High Definition Audio)
Monitor(s) Displays
LG Flatron E2040T
Screen Resolution
1600x900
Hard Drives
Western Digital 1 TB
Seagate 500 GB
PSU
Corsair VS550
Case
Cooler Master K380
Cooling
Cooler Master Seidon 120V Plus
Keyboard
Logitech MK260r
Mouse
Logitech MK260r
Internet Speed
PMPL Broadband
Antivirus
Windows Defender + MBAM
Browser
Firefox
Other Info
Dell Studio 15" Laptop
Back
Top