event id 1517 and uphclean

S

snowball

After installing sp2 the only problem i got was the above event in event
viewer that holds the registry. I installed the microsoft recommended
program to deal with it, uphclean. I t provides the following information on
that event which implicates several registry keys related to microsoft
updated security. Can anyone suggest what the problem is and how it can be
dealt with besides using uphclean which really justs masks the problem?
Thanks.


Event Type: Information
Event Source: UPHClean
Event Category: None
Event ID: 1201
Date: 9/3/2004
Time: 10:15:33 PM
User: JERRIES\Jerry Sopko
Computer: JERRIES
Description:
The following handles in user profile hive JERRIES\Jerry Sopko
(S-1-5-21-851260465-2133605401-951809763-1006) have been closed because they
were preventing the profile from unloading successfully:

svchost.exe (844)
HKCU (0x318)

svchost.exe (1004)
HKCU\Software\Microsoft\SystemCertificates\CA (0x1548)
HKCU\Software\Microsoft\SystemCertificates\Root (0x1550)
HKCU (0x1554)
HKCU\Software\Microsoft\SystemCertificates\trust (0x157c)
HKCU (0x1580)
HKCU\Software\Microsoft\SystemCertificates\My (0x1584)
HKCU\Software\Policies\Microsoft\SystemCertificates (0x15a4)
HKCU\Software\Policies\Microsoft\SystemCertificates (0x15bc)


For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
 
D

davexnet02

After installing sp2 the only problem i got was the above event in event
viewer that holds the registry. I installed the microsoft recommended
program to deal with it, uphclean. I t provides the following information on
that event which implicates several registry keys related to microsoft
updated security. Can anyone suggest what the problem is and how it can be
dealt with besides using uphclean which really justs masks the problem?
Thanks.


Event Type: Information
Event Source: UPHClean
Event Category: None
Event ID: 1201
Date: 9/3/2004
Time: 10:15:33 PM
User: JERRIES\Jerry Sopko
Computer: JERRIES
Description:
The following handles in user profile hive JERRIES\Jerry Sopko
(S-1-5-21-851260465-2133605401-951809763-1006) have been closed because they
were preventing the profile from unloading successfully:

svchost.exe (844)
HKCU (0x318)

svchost.exe (1004)
HKCU\Software\Microsoft\SystemCertificates\CA (0x1548)
HKCU\Software\Microsoft\SystemCertificates\Root (0x1550)
HKCU (0x1554)
HKCU\Software\Microsoft\SystemCertificates\trust (0x157c)
HKCU (0x1580)
HKCU\Software\Microsoft\SystemCertificates\My (0x1584)
HKCU\Software\Policies\Microsoft\SystemCertificates (0x15a4)
HKCU\Software\Policies\Microsoft\SystemCertificates (0x15bc)


For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Click to expand...
On my machine this was related to ALG.EXE, which is the
application gateway used by Windows firewall.
Here's something to try.
Just before you're ready to shutdown, enter the services
(services.msc from the RUN box) and stop the application
gateway service. Exit the tool and reboot.
Check the event viewer and see if event 1517 shows up.
Please post back with the result.
Dave
 
M

Microsoft

This event appears if you have installed UPHClean on your system. It is an
informational event notifying you what handles have been closed in order to
allow the profile to be unloaded successfully.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

UPHClean Question 1
Warning - Event ID 1530 5
IE6 slow and hangs when launched 4

Top