F
Frenchy
Every time I shut the machine (Vista Ultimate) there are two Warning entries
in the Event Log for
Event_Hive_Leak
Log Name: Application
Source: Microsoft-Windows-User Profiles Service
Date: 20/10/2007 10:42:38 p.m.
Event ID: 1530
Task Category: None
Level: Warning
Keywords: Classic
User: SYSTEM
Computer: ------
Description:
Windows detected your registry file is still in use by other applications or
services. The file will be unloaded now. The applications or services that
hold your registry file may not function properly afterwards.
DETAIL -
1 user registry handles leaked from
\Registry\User\S-1-5-21-3422376380-1531114358-1004705903-1000_Classes:
Process 928 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has
opened key
\REGISTRY\USER\S-1-5-21-3422376380-1531114358-1004705903-1000_CLASSES
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-User Profiles Service"
Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" EventSourceName="profsvc" />
<EventID Qualifiers="32768">1530</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2007-10-20T09:42:38.000Z" />
<EventRecordID>22202</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>Name removed here</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData Name="EVENT_HIVE_LEAK">
<Data Name="Detail">1 user registry handles leaked from
\Registry\User\S-1-5-21-3422376380-1531114358-1004705903-1000_Classes:
Process 928 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has
opened key
\REGISTRY\USER\S-1-5-21-3422376380-1531114358-1004705903-1000_CLASSES
</Data>
</EventData>
</Event>
Now a Google search shows MANY people reporting this and probably due to
Windows Defender, yet not one solution?? Win XP had a small Event Clean-up
file to fix Hive problems, such as this. Any bright spark here got any
ideas. Before I get told to go back to XP or Open Source, I LOVE Vista and
its challenges
Frenchy
in the Event Log for
Event_Hive_Leak
Log Name: Application
Source: Microsoft-Windows-User Profiles Service
Date: 20/10/2007 10:42:38 p.m.
Event ID: 1530
Task Category: None
Level: Warning
Keywords: Classic
User: SYSTEM
Computer: ------
Description:
Windows detected your registry file is still in use by other applications or
services. The file will be unloaded now. The applications or services that
hold your registry file may not function properly afterwards.
DETAIL -
1 user registry handles leaked from
\Registry\User\S-1-5-21-3422376380-1531114358-1004705903-1000_Classes:
Process 928 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has
opened key
\REGISTRY\USER\S-1-5-21-3422376380-1531114358-1004705903-1000_CLASSES
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-User Profiles Service"
Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" EventSourceName="profsvc" />
<EventID Qualifiers="32768">1530</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2007-10-20T09:42:38.000Z" />
<EventRecordID>22202</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>Name removed here</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData Name="EVENT_HIVE_LEAK">
<Data Name="Detail">1 user registry handles leaked from
\Registry\User\S-1-5-21-3422376380-1531114358-1004705903-1000_Classes:
Process 928 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has
opened key
\REGISTRY\USER\S-1-5-21-3422376380-1531114358-1004705903-1000_CLASSES
</Data>
</EventData>
</Event>
Now a Google search shows MANY people reporting this and probably due to
Windows Defender, yet not one solution?? Win XP had a small Event Clean-up
file to fix Hive problems, such as this. Any bright spark here got any
ideas. Before I get told to go back to XP or Open Source, I LOVE Vista and
its challenges
Frenchy