none
Windows Vista Event ID 1530

    السؤال


  • Microsoft Product: Windows Operating System;
    Version: 6.0.6000.16386;
     Event ID: 1530;
    Event Source: Microsoft-Windows-User Profiles Service

         I got this computer a year ago through a Costco.  After initial set up I started recieving the error on shutdown.  Some application would not stop running.  The error code would constantly change.  I went into Administrative tools to figure the problem...At first it was hard to see where it was coming from:

    Log Name:      Application
    Source:        Microsoft-Windows-User Profiles Service
    Date:          11/28/2008 8:00:33 PM
    Event ID:      1530
    Task Category: None
    Level:         Warning
    Keywords:      Classic
    User:          SYSTEM
    Computer:      Jeter-PC
    Description:
    Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. 

     DETAIL -
     0 user registry handles leaked from \Registry\User\S-1-5-21-377006347-2916014423-2624685925-1000:

    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" EventSourceName="profsvc" />
        <EventID Qualifiers="32768">1530</EventID>
        <Version>0</Version>
        <Level>3</Level>
        <Task>0</Task>
        <Opcode>0</Opcode>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2008-11-29T04:00:33.000Z" />
        <EventRecordID>1033</EventRecordID>
        <Correlation />
        <Execution ProcessID="0" ThreadID="0" />
        <Channel>Application</Channel>
        <Computer>Jeter-PC</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <EventData Name="EVENT_HIVE_LEAK">
        <Data Name="Detail">0 user registry handles leaked from \Registry\User\S-1-5-21-377006347-2916014423-2624685925-1000:
    </Data>
      </EventData>
    </Event>

              This is how it looks now

    Log Name:      Application
    Source:        Microsoft-Windows-User Profiles Service
    Date:          11/5/2009 1:17:02 AM
    Event ID:      1530
    Task Category: None
    Level:         Warning
    Keywords:      Classic
    User:          SYSTEM
    Computer:      Jeter-PC
    Description:
    Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. 

     DETAIL -
     6 user registry handles leaked from \Registry\User\S-1-5-21-377006347-2916014423-2624685925-1001:
    Process 1624 (\Device\HarddiskVolume1\WINDOWS\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-377006347-2916014423-2624685925-1001\Software\Hewlett-Packard\cefa7a96-bbc4-44f7-a6a9-ab9ce2584136
    Process 1624 (\Device\HarddiskVolume1\WINDOWS\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-377006347-2916014423-2624685925-1001\Software\Hewlett-Packard\cefa7a96-bbc4-44f7-a6a9-ab9ce2584136
    Process 1624 (\Device\HarddiskVolume1\WINDOWS\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-377006347-2916014423-2624685925-1001\Software\Hewlett-Packard\cefa7a96-bbc4-44f7-a6a9-ab9ce2584136
    Process 1624 (\Device\HarddiskVolume1\WINDOWS\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-377006347-2916014423-2624685925-1001\Software\Hewlett-Packard\cefa7a96-bbc4-44f7-a6a9-ab9ce2584136\CustomShortcutPoolData
    Process 1624 (\Device\HarddiskVolume1\WINDOWS\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-377006347-2916014423-2624685925-1001\Software\Hewlett-Packard\cefa7a96-bbc4-44f7-a6a9-ab9ce2584136\CustomShortcutPoolData
    Process 1624 (\Device\HarddiskVolume1\WINDOWS\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-377006347-2916014423-2624685925-1001\Software\Hewlett-Packard\cefa7a96-bbc4-44f7-a6a9-ab9ce2584136\CustomShortcutPoolData

    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" EventSourceName="profsvc" />
        <EventID Qualifiers="32768">1530</EventID>
        <Version>0</Version>
        <Level>3</Level>
        <Task>0</Task>
        <Opcode>0</Opcode>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2009-11-05T09:17:02.000Z" />
        <EventRecordID>22738</EventRecordID>
        <Correlation />
        <Execution ProcessID="0" ThreadID="0" />
        <Channel>Application</Channel>
        <Computer>Jeter-PC</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <EventData Name="EVENT_HIVE_LEAK">
        <Data Name="Detail">6 user registry handles leaked from \Registry\User\S-1-5-21-377006347-2916014423-2624685925-1001:
    Process 1624 (\Device\HarddiskVolume1\WINDOWS\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-377006347-2916014423-2624685925-1001\Software\Hewlett-Packard\cefa7a96-bbc4-44f7-a6a9-ab9ce2584136
    Process 1624 (\Device\HarddiskVolume1\WINDOWS\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-377006347-2916014423-2624685925-1001\Software\Hewlett-Packard\cefa7a96-bbc4-44f7-a6a9-ab9ce2584136
    Process 1624 (\Device\HarddiskVolume1\WINDOWS\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-377006347-2916014423-2624685925-1001\Software\Hewlett-Packard\cefa7a96-bbc4-44f7-a6a9-ab9ce2584136
    Process 1624 (\Device\HarddiskVolume1\WINDOWS\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-377006347-2916014423-2624685925-1001\Software\Hewlett-Packard\cefa7a96-bbc4-44f7-a6a9-ab9ce2584136\CustomShortcutPoolData
    Process 1624 (\Device\HarddiskVolume1\WINDOWS\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-377006347-2916014423-2624685925-1001\Software\Hewlett-Packard\cefa7a96-bbc4-44f7-a6a9-ab9ce2584136\CustomShortcutPoolData
    Process 1624 (\Device\HarddiskVolume1\WINDOWS\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-377006347-2916014423-2624685925-1001\Software\Hewlett-Packard\cefa7a96-bbc4-44f7-a6a9-ab9ce2584136\CustomShortcutPoolData
    </Data>
      </EventData>
    </Event>


          As I looked more into it in this last error the details mention spoolsv.exe....there are different ones such as svchost.exe, winlogon.exe ect.  I have found 6 different registry errors for the same event.  The spools works with the plug and play, that works with the Apple software for my iphone.  
          If this is a registry issue then would my personal info be compromised and/or the errors get worse if ignored?  Is this fixable?  Did I buy a bad computer?  Any help or ideas would be greatly appreciated...
       Thank You,
        XYLA39
     

    18/ذو القعدة/1430 01:23 ص