Warning - Event ID 1530

Discussion in 'Windows Vista Performance' started by MrSlartybartfast, Jul 4, 2007.

  1. I get two of these warnings everytime I restart the computer and I don't know
    what it means. I use Vista 64bit and full computer specs listed below. The
    warnings date back many weeks to when I first install Windows.. Any
    information about this warning is much needed, or how to diagnose if this is
    the cause of my instability. Other than this warning my event log is fairly
    clean, so I'm kinda hoping to get some more information about this, if I can
    stop it, or if it is causing all programs to randomly stop responding. Any
    thoughts or more information would be much appreciated.


    *************************************
    *************************************
    Warning - Event ID 1530
    Windows detected your registry file is still in use by other applications or
    services. The file will be unloaded now. The applications or services that
    hold your registry file may not function properly afterwards.

    DETAIL -
    1 user registry handles leaked from
    \Registry\User\S-1-5-21-173458893-40618465-1331043875-1000_Classes:
    Process 936 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has
    opened key \REGISTRY\USER\S-1-5-21-173458893-40618465-1331043875-1000_CLASSES


    *************************************
    *************************************
    Warning - Event ID 1530
    Windows detected your registry file is still in use by other applications or
    services. The file will be unloaded now. The applications or services that
    hold your registry file may not function properly afterwards.

    DETAIL -
    12 user registry handles leaked from
    \Registry\User\S-1-5-21-173458893-40618465-1331043875-1000:
    Process 472 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has
    opened key \REGISTRY\USER\S-1-5-21-173458893-40618465-1331043875-1000
    Process 472 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has
    opened key \REGISTRY\USER\S-1-5-21-173458893-40618465-1331043875-1000
    Process 472 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has
    opened key \REGISTRY\USER\S-1-5-21-173458893-40618465-1331043875-1000
    Process 936 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has
    opened key \REGISTRY\USER\S-1-5-21-173458893-40618465-1331043875-1000
    Process 472 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has
    opened key
    \REGISTRY\USER\S-1-5-21-173458893-40618465-1331043875-1000\Software\Microsoft\SystemCertificates\Root
    Process 472 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has
    opened key
    \REGISTRY\USER\S-1-5-21-173458893-40618465-1331043875-1000\Software\Microsoft\SystemCertificates\My
    Process 472 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has
    opened key
    \REGISTRY\USER\S-1-5-21-173458893-40618465-1331043875-1000\Software\Microsoft\SystemCertificates\CA
    Process 472 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has
    opened key
    \REGISTRY\USER\S-1-5-21-173458893-40618465-1331043875-1000\Software\Microsoft\SystemCertificates\SmartCardRoot
    Process 472 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has
    opened key
    \REGISTRY\USER\S-1-5-21-173458893-40618465-1331043875-1000\Software\Microsoft\SystemCertificates\trust
    Process 472 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has
    opened key
    \REGISTRY\USER\S-1-5-21-173458893-40618465-1331043875-1000\Software\Microsoft\SystemCertificates\Disallowed
    Process 472 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has
    opened key
    \REGISTRY\USER\S-1-5-21-173458893-40618465-1331043875-1000\Software\Policies\Microsoft\SystemCertificates
    Process 472 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has
    opened key
    \REGISTRY\USER\S-1-5-21-173458893-40618465-1331043875-1000\Software\Policies\Microsoft\SystemCertificates


    ***********************************
    ***********************************

    System Specs:
    CPU: Intel Core 2 Duo E6600 @2.4GHz
    GPU: NVidia 8800GTX @575/1300/900, Driver 158.45
    Motherboard: ASUS P5B Deluxe/WiFi-AP, BIOS 0910
    RAM: 4GB Corsair 4-4-4-12 2T DDR667
    Hard Drive: Western Digital 150GB Raptor
    DVD-RW: Lite-on LH-20A1S
    Sound Card: Creative X-Fi Xtreme Music, Driver 2.15.0002
    Power Supply: Thermaltake WO116 750W
    TV Tuner: DVico Fusion HDTV DVB-t Plus, driver 2.0.1.0
    Case: Thermaltake Kandalf VA9000SWA
    Monitor: Samsung 913N 19" LCD
    Operating System: Vista x64 Ultimate
     
    MrSlartybartfast, Jul 4, 2007
    #1
    1. Advertisements

  2. MrSlartybartfast

    Farbuncle Guest

    I get a few of these. We are waiting for IPHClean version 2.0 to be
    released. The Beta is in test now. These do not seem to cause any problem
    with my system.
     
    Farbuncle, Jul 4, 2007
    #2
    1. Advertisements

  3. I presume you mean UPHClean? I found some more info on this utility, it
    doesn't specifically refer to this event id but seems similar and makes
    sense. So it would only be a problem if I were using roaming profiles (which
    I'm not). Thanks for the lead.
    http://www.windowsitpro.com/Articles/ArticleID/42257/42257.html
     
    MrSlartybartfast, Jul 5, 2007
    #3
  4. MrSlartybartfast

    LoneStar Guest

    About your 1530 Event....... please tell me whether you can access the
    Control Panel at all when you are having this Event ID problem. I had this
    problem too and couldn't access my Control Panel, 3D Aero, some Vista games,
    and a couple other items. Let me know -- thanks!

    EW
     
    LoneStar, Jul 5, 2007
    #4
  5. I have 3d Aero, can access the control panel, and play all my games. The
    only problem I have is approximately once a week a program will stop
    responding and crash to desktop. It's totally random, any program could
    crash, for no apparent reason. I also get almost daily, a pause, where the
    computer just stops to think for about 30 seconds before it starts working
    again (probably related to the first problem)

    General searching on the internet has led me to believe neither of these
    problems are related to the event id 1530. I am still searching for the
    source of my problem.
     
    MrSlartybartfast, Jul 6, 2007
    #5
  6. MrSlartybartfast

    LoneStar Guest

    Thanks for the reply. Apparently your problem and mine are different.

    Good luck with your situation -- perhaps you'll need to resort to a major
    system recovery operation, to the condition when you first got your computer
    (most computers have this option), then start from scratch. Not that big a
    deal, unless you have tons of installed programs.

    EW
     
    LoneStar, Jul 6, 2007
    #6
  7. MrSlartybartfast

    ander Guest

    ander, Jul 16, 2008
    #7
  8. MrSlartybartfast

    dood Guest

    I was looking in Problem Reports and Solutions (Control Panel|Syste
    and maintenance) and I noticed that Kaspersky stopped workin
    periodically. Windows didn't notify me at the time, so i had bee
    running with Kaspersky off for the majority of the time for nearly
    month! I was convinced I had been hacked so spent hours poking aroun
    Kaspersky's logs and all the event logs to see what had happened. Lon
    story short, In the application log in event viewer, I found the las
    logon session when kaspersky was still reliable. At the end of it wa
    Event ID 1530 with the messag

    Windows detected your registry file is still in use by othe
    applications or services. The file will be unloaded now. Th
    applications or services that hold your registry file may not functio
    properly afterwards

    So i googled it and found this page. I'm now convinced it was thi
    error the caused Kaspersky to crash. I reinstalled Kaspersky and i
    hasn't crashed since. My guess is that this error messes up the registr
    in some way that can cause apps to become unstable. I guess th
    reinstall fixed Kaspersky's registry settings

    Anyway, I recommend if you've had this error, check Problem Reports an
    Solutions and reinstall any apps that have been regularly crashing sinc
    then

    hehe, notice that Microsoft say "-Usually-, you can safely ignore thi
    event.
     
    dood, Jul 31, 2009
    #8
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.