locked
Event Log RRS feed

  • Question

  • I was looking at an event log entry and have no idea what it is really trying to tell me.  How do I prevent this error in the future?  Please help.


    Log Name:      Application
    Source:        Microsoft-Windows-User Profiles Service
    Date:          5/9/2009 7:36:12 PM
    Event ID:      1530
    Task Category: None
    Level:         Warning
    Keywords:     
    User:          SYSTEM
    Computer:      P5ND2SLI
    Description:
    Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. 

     DETAIL -
     2 user registry handles leaked from \Registry\User\S-1-5-21-937204681-2332284693-2415916495-1003_Classes:
    Process 43456 (\Device\HarddiskVolume2\Windows\System32\CTxfispi.exe) has opened key \REGISTRY\USER\S-1-5-21-937204681-2332284693-2415916495-1003_CLASSES
    Process 43456 (\Device\HarddiskVolume2\Windows\System32\CTxfispi.exe) has opened key \REGISTRY\USER\S-1-5-21-937204681-2332284693-2415916495-1003_CLASSES

    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" />
        <EventID>1530</EventID>
        <Version>0</Version>
        <Level>3</Level>
        <Task>0</Task>
        <Opcode>0</Opcode>
        <Keywords>0x8000000000000000</Keywords>
        <TimeCreated SystemTime="2009-05-09T23:36:12.952148400Z" />
        <EventRecordID>1970</EventRecordID>
        <Correlation />
        <Execution ProcessID="1008" ThreadID="48248" />
        <Channel>Application</Channel>
        <Computer>P5ND2SLI</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <EventData Name="EVENT_HIVE_LEAK">
        <Data Name="Detail">2 user registry handles leaked from \Registry\User\S-1-5-21-937204681-2332284693-2415916495-1003_Classes:
    Process 43456 (\Device\HarddiskVolume2\Windows\System32\CTxfispi.exe) has opened key \REGISTRY\USER\S-1-5-21-937204681-2332284693-2415916495-1003_CLASSES
    Process 43456 (\Device\HarddiskVolume2\Windows\System32\CTxfispi.exe) has opened key \REGISTRY\USER\S-1-5-21-937204681-2332284693-2415916495-1003_CLASSES
    </Data>
      </EventData>
    </Event>

    Sunday, May 10, 2009 7:48 AM

Answers

  • The problem seemed to have disappeared without me doing anything.  I'm guessing an update must've fixed it.
    • Marked as answer by Glendon H Friday, May 22, 2009 2:22 PM
    Friday, May 22, 2009 2:22 PM