Question of leak of registry

Hello, I saw this in the event viewer and wonder what it is and how to fix.

Thank you

-
-
 
  1530
  0
  3
  0
  0
  0 x 8000000000000000
 
  3745
 
 
  Application
  c PC
 
 

-
  15 user registry handles are escaped of \Registry\User\S-1-5-21-2126825939-3679591267-1657986941-1000: 728 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) open key \REGISTRY\USER\S-1-5-21-2126825939-3679591267-1657986941-1000 728 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) process opened key \REGISTRY\USER\S-1-5-21-2126825939-3679591267-1657986941-1000 728 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) process opened key \REGISTRY\USER\S-1-5-21-2126825939-3679591267-1657986941-1000 728 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) process opened key \REGISTRY\USER\S-1-5-21-2126825939-3679591267-1657986941-1000 728 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) process opened \REGISTRY\USER\S-1-5-21-2126825939-3679591267-1657986941-1000\Software\ Microsoft\ key SystemCertificates\Root 728 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) process opened key process \REGISTRY\USER\S-1-5-21-2126825939-3679591267-1657986941-1000\Software\Microsoft\SystemCertificates\SmartCardRoot 728 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) open \REGISTRY\USER\S-1-5-21-2126825939-3679591267-1657986941-1000\Software\Microsoft\SystemCertificates\My key process 728 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) open \REGISTRY\USER\S-1-5-21-2126825939-3679591267-1657986941-1000\Software\Microsoft\SystemCertificates\trust key process 728 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened \REGISTRY\USER\S-1-5-21-2126825939-3679591267-1657986941-1000\Software\Microsoft\SystemCertificates\Disallowed 728 (\Device\HarddiskVolume2\ process Windows\System32 - key \lsass.exe) \REGISTRY\USER\S-1-5-21-2126825939-3679591267-1657986941-1000\Software\Microsoft\SystemCertificates\CA key process opened 728 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) open \REGISTRY\USER\S-1-5-21-2126825939-3679591267-1657986941-1000\Software\Policies\Microsoft\SystemCertificates key process 728 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) open \REGISTRY\USER\S-1-5-21-2126825939-3679591267-1657986941-1000\Software\Policies\Microsoft\SystemCertificates key process 728 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) open \REGISTRY\USER\S-1-5-21-2126825939-3679591267-1657986941-1000\Software\Policies\Microsoft\SystemCertificates key process 728 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened \registry\user\-cles S-1-5-21-2126825939-3679591267-1657986941-1000\Software\Policies\Microsoft\SystemCertificates 728 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) open \REGISTRY\USER\S-1-5-21-2126825939-3679591267-1657986941-1000\Software\Microsoft\SystemCertificates\TrustedPeople key
 

 

Event 1530 is logged as a warning event. Specifically, it occurs because Windows automatically closes any registry handle to a user profile that is left open by an application.

If this event occurs frequently, it may be useful to follow the guilty program (start with a clean boot programs and initialize one by one until the message begins to reproduce), but for the most part, it's way to Windows 7 is to tell you it has detected a problem and fixes it so I don't think that more action on your part is absolutely necessary.

Event ID: 1530 can be saved in the Application on a Windows Vista or a newer computer log

How to perform a clean boot for a problem in Windows Vista, Windows 7 or Windows 8

Tags: Windows

Similar Questions

  • Leak of registry since installing KB2434419 Live Essentials

    Since the download of this package that I've been doing a minimum of 8 memory leaks, it also affects my strategies of user rights.

    Im going to uninstall

    You can find support in this forum ONLY for the installation/upgrade to Windows Live Essentials 2011: http://windowslivehelp.com/forums.aspx?forumid=a372972e-8e7a-4d85-adc3-a1b43e8c02ec

    PS: The registry is not "flee".

    ~ Robear Dyer (PA Bear) ~ MS MVP (that is to say, mail, security, Windows & Update Services) since 2002 ~ WARNING: MS MVPs represent or work for Microsoft

  • A few questions on System32 and registry

    What are the dangers of editing the registry? If done correctly, this could happen, I heard that it can destory a computer, IS it true?

    And what are the dangers of a modification or deletion of System32?

    On a double system startup, if an operating system may not start the other should still work fine (as OS #1 is not trash OS #2 as she collapsed, in other words).

    "Chex" wrote in the new message: * e-mail address is removed from the privacy... *

    On a Confiquerd Dual-boot computer, he will make only one copy of windows unstabble? or all of them? (Im thinking that one, but I need to be sure.) And change the Resgistry can only doesn't damage the installation of Windows, Correct?

  • location of Halo 4 leak

    Yes, I found the location of a Web site that is distributing versions of Halo 4 leaks. I'm trying to prevent that all sorts of people have already played and beat the game and I think it's unfair. and I know they get a way with it also. so in order for me to you guys help with this question of leak, I tell myself to give u links to the location of Halo 4 game leak. the links are Please do something about this sue or do something your welcome for the links guys.

    Just for future reference, piracy reports can be done using the online form found here: http://www.microsoft.com/en-us/piracy/reporting/default.aspx

  • Problem with loading of Images from Google

    If I click on one of these photos & choose open in new tab https://fud.community.services.support.microsoft.com/Fud/FileDownloadHandler.ashx?fid=23a96ac6-b84d-4e5a-be5f-ee9132199fac new windows starts loading, but loading never, ends in past it use to open this page full screen if I chose open to the next https://fud.community.services.support.microsoft.com/Fud/FileDownloadHandler.ashx?fid=bab88957-319a-4363-94c3-3249dffdb36atab & firefox starts to consume plenty of use of the disk when loading constantly https://fud.community.services.support.microsoft.com/Fud/FileDownloadHandler.ashx?fid=0da2dd58-2534-4f61-80e7-c5810795a79d whats up with fox? tried this trick with IE, no endless loading, but kind of like Board page, background adds same color as u see on the link (dark), but no picture dark full-page, & IE does not, google changed how it works?, but they have simply not finished remove the fabric & this page left Board & fox is unable to load the blank page? , so I guess his issue not much with images, but did not know how the name of the topic

    all my adds, for additional information

    Edge of Adblock

    Strengthen the encryption

    Ghostery

    More in the content UI +.

    Said John99

    Test in a way similar to my suggestion in your question/questions/1048975 leaks memory
    You use plugins that are designed to block things, and this is probably what is happening, especially with many of these plugins.

    See also

    Also see also

    I must admit that I have not the slightest idea what ms. fud.community.services is

    understand the issue, I have activated encryption apply on google for (I say, cause with adjustable i and different rules on every page) & google does not like to apply encryption, this image is maybe the mac cause fox it different looks, which shows IT enabled http://www.google.ee/imgres?imgurl=https://addons.cdn.mozilla.net/user-media/previews/full/132/132616.png%253Fmodified%253D1396139378 & imgrefurl = https://addons.mozilla.org/en-US/firefox/addon/enforce-encryption/ & h = 504 & w = 681 & tbnid = DT-RdoL0j4fr2M: & zoom = 1 & docid = eCLMIh_3M8GZNM & ei = Ex7zVO-ZDsKcygOP-oLwBQ & tbm = isch & ved = 0CB4QMygBMAE, after that I turned it off, he returned to normal (no problem loading) and no endless loading, I've had HTTPS Everywhere before, I guess HTTPS Everywhere not to force pages which do not support 100%

  • Publish with the ID of platform for the specified CPU in Regedit - NEED HELP

    Hello

    I bought a new HP Zbook G3 with windows 7 64 bit

    The question I have is registry picks up 32-bit like the platform ID even if the system is 64-bit.

    Run 64-bit programs works fine as long as I can install and this is where it happens the question.

    -Installation of 64-bit program works very well if its not programmed to a compability
    Search for drivers against the platform ID registers.
    -If it don't the recommended microsoft check platform Setup normally closes
    to get the information that the platform is a 32-bit system.

    I tried in vain to solutions:
    So far, I have tried to remove the ID platform manually, and then restart but it still captures platform as 32-bit default ID.
    I also tried to remove the platform ID and then replace it by manually creating platform ID REG_QWORD 0 x 00000040, always after that restart the platform ID is default back to 32-bit.

    Hello

    Thank you for visiting Microsoft Community.

    As I understand it, the problem with ID platform for the CPU indicated in regedit on the system.

    I certainly understand your concern and appreciate very much all your efforts to try to solve this problem.

    To get more information about it, we have a dedicated forum where these issues are dealt with and would be better suited to the TechNet community.

    Please visit the link below to find a community that will provide the best support.

    https://social.technet.Microsoft.com/forums/Windows/en-us/home?category=w7itpro

    I hope this information is useful.

    Please let us know if you need more help, we will be happy to help you.

    Thank you.

  • Libraries and photo gallery

    When has it become necessary to put pictures a "library" until I'm able to edit their? ".  I have Win7.  Have always had my pix on an external hard drive.  I used to be able to just open the drive, open the photo with Win Live Photo Gallery, and make the changes that I wanted to.  NOW I have to put in a 'library' on my computer, and then make the changes.  I have an external for a reason!  Don't want the pictures on my computer!

    I also tried 'their' indications concerning, adding / including the library and you get the msg that this can not be done...  WHAT A SNAFU!

    I read pages and pages of directions 'help' without any solution.  And a lot of articles.  I don't understand why I can't do it the way that I do.  The computer is a few years old, but I was doing the process on this equipment.
    I never even did anything in a 'library' before...

    @VolunteerJ, thanks for the links.  I read them.  Some helped me understand the concept of libraries.  YET, I still do not understand why I would use I KNOW where my files/folders are on my external.  I don't know that I Landa disabling, because I don't know much about records and don't want to spoil anything...

    While links cleared up some things... I am always frustrated by the fact that I can just open my photo of the exterior in the library and make the changes!  If the pix is not in a library I can't change them...  Any suggestions for this?
    AND, IF I have TO put the pix in a library to edit, what about my question where it won't let me include them?
    Thanks again for your help!

    =======================================
    I'm afraid of the registry but the file understand you
    can download from these sites is mounting for
    you.  And there are two files, disable and enable.

    I don't anticipate any questions, but when the registry is
    involved the following warning is always appropriate.

    Proceed at your own risk *.

    You could create a system restore point and try it
    .reg file... If the result is not satisfactory... restore the
    System.

    If you want to know what is in the files... just drag drop
    stick on the Notepad to open and read the content.

    In any case... I have a few questions...

    I was wondering... If you right-click a file or a thumb picture
    name on your external drive and choose... Open with.
    Photo Gallery... what happens?

    I guess that your photos are in the .jpg format? What
    occurs if you set the default program photo library
    to open the .jpg files?

    Windows 7 - changing the programs that Windows uses by default
    http://Windows.Microsoft.com/en-us/Windows7/change-which-programs-Windows-uses-by-default

  • Definition of default on 64-bit Windows 8 MIDI output device

    Hello, I have a problem with the output device default MIDI on Windows 8 64 bit on a dv6 HP Envy that I picked up yesterday. I read in many places that the default MIDI output is somehow locked in Windows 8, and I have read on the registry keys have no effect when changed manually:

    \Default HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\ {4EFE2452-168A-11D1-BC76-00C04FB9453B} MidiOut device
    HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum 64-bit\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\Default MidiOut device
    However, I have a piece of software that DOESN'T seem to be able to change the default output MIDI, VirtualMidiSynth of CoolSoft. It seems to pass the device of an option in the installation dialog box that sets the default output of the synth CoolSoft. When I install the program by selecting this option, I am able to use programs that can send to the default output device (there no option to send to anything else; I wrote the code for these programs, so I know for certain) and they send an exit to the new synthesizer rather than the synthesizer MS-provided. When the CoolSoft synth is uninstalled or installed without the option to change device selected, the MS Synthesizer is still used. From there I understand it must be possible to change the default MIDI device output. Clearly the two above keys have no effect, since I tried to change several times and even restarted between changes. So my question is: what other registry keys or other system in Windows 8 parameters are responsible for which allows the default device to change MIDI output?

    Guys, I finally found something that works.  At least for me... http://www.benryves.com/products/vistamidi even if it is called Vistamidi, I'm under Windows 8 Pro.  I right click on it and run as administrator.  Now, the output will my MIDI keyboard!  It took altogether thirty hours in the last 2 years to understand that.  If all goes well, I can save you from this same experience.

  • Cannot get my profile. 8 temporary profile windows

    Original title:

    Cannot get my profile

    I connect and it connects me to a temporary profile. How to get back my profile and how do I know why it does this?

    Hi Stacey,

    I helped Aggy88 which had a similar problem. My suggestions helped solve the problem. You can try the same thing and come back with the results.

    Refer to the suggestion that I provided on 26 September 2013 and let us know if this helps you fix the temporary profile on the question paper.

    REGISTRY WARNING:

    Change the settings of the REGISTRY can cause serious problems that may prevent your computer from starting properly. Microsoft cannot guarantee that problems resulting from the REGISTRY settings configuration can be solved. Changes to these settings are at your own risk.

    Response with the State of the question.

  • in Server 2008 R2 registry handle leak

    I have a Server 2008 r2 running essential services of the mission. After you close a desktop session remotely, my stopping services with cast registry handles I have to address this problem. All of the suggestions. The error is the following: event ID 1530

    Windows detected your registry file is still in use for other applications or services. The file will be unloaded now. Applications or services that keep your registry file may not work properly thereafter.

    DETAIL-

    Register of the 1 handles user are escaped from \Registry\User\S-1-5-21-343818398-1788223648-725345543-2680:

    196 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) process has opened \REGISTRY\USER\S-1-5-21-343818398-1788223648-725345543-2680\Printers\DevModePerUser key

    Hello

    Your question of Windows is more complex than what is generally answered in the Microsoft Answers forums. It is better suited for the IT Pro TechNet public. Please post your question in the Windows Server forum. You can follow the link to your question:

    http://social.technet.Microsoft.com/forums/en-us/category/WindowsServer

  • Make the double question mark average in a registry entry as------? \C:\WINDOWS\system32\drivers\

    In my registry HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\eabfiltr

    I see double points to mark that precedes the file name in the entrance to the path of the Image:

    Image path = ? ------C:\WINDOWS\system32\drivers\EABFiltr.sys

    They appear on a number of other drivers - I checked, some drivers with double question marks are signed, others are unsigned, which doesn't seem to be not that it.  The drivers are present and operational system.  Is there something special that means?  I couldn't find anything definitive in Google or Bing.

    That said, it does reference to a directory of temporary names created by windows at startup, does not sound like a sign of boredom

    http://help.WUGNET.com/Windows/registry-entry-path-preceded-ftopict630476.html

  • iTunes 8.2.1.6 with Vista 64-bit Home Premium edition - registry questions

    I've seen a few different positions on issues of iTunes, but none that match mine, so that's.  I am running Vista Home Premium 64-bit on an HP Pavilion dv4 laptop and trying to install iTunes 8.2.16 (latest version) because I sync it with my iPhone (1st generation, if that matters).

    After erasing completely my computer of all previous installations of iTunes by other threads including uninstalling Quicktime and any program having to do with the configuration/program Panel Apple, empty the recycling bin, restart, remove all the programs apple program (x 86) and all through my computer, restart, pure install iTunes latest version (tried this using Firefox and IE).  When I run iTunes, I have several questions:
    1. I get a message saying that "the registry settings used by the iTunes for importing and burning CDs and DVDs are missing.  This can occur as a result of installing other CD burning software.  Please reinstall iTunes. "I have uninstalled and reinstalled iTunes, a few times.  If I close the window or click on 'ok', iTunes opens, but then there are more questions.
    2 a point iTunes worked my recorder/CD Player no longer works and I had to get a new one from the manufacturer.
    3. I can not download the latest version of the software for my iPhone.  When trying to download or download and install, I get the message, "there was a problem downloading the software for the iPhone"IPhone of Heather".  The network connection timed out. Make sure your network settings are correct and your connection is active network, or try again later. "I tried several times without success, and it is not a problem with my internet as use it for other things before and after/during the download.
    4. once I bought songs from my iPhone, I opened iTunes and click on to search for available downloads - my songs have yet to download on iTunes on my computer.
    5 iTunes crashes
    6. when I run the diagnostic of iTunes, it does not recognize my cd/dvd burner.  I looked for the lower and upper filters and either they were not in the regedit or I deleted them according to other threads Microsoft Vista and then my computer would not restart properly and had to be restarted from a previous restore point.

    I'm at my wits end, you give me all the information I can think possible and just need help :(

    HI - in case anyone else has this problem, I found the solution... it wasn't a problem with iTunes.  Instead, it was a Vista incompatibility problem and protection against viruses.  If you are on Vista 64-bit, a updated driver GEAR Software Inc. for Windows 64-bit (http://www.gearsoftware.com/support/drivers.php) when downloaded and installed fixed the following points:

    1. I get a message saying that "the registry settings used by the iTunes for importing and burning CDs and DVDs are missing.  This can occur as a result of installing other CD burning software.  Please reinstall iTunes. "I have uninstalled and reinstalled iTunes, a few times.  If I close the window or click on 'ok', iTunes opens, but then there are more questions.
    2 a point iTunes worked my recorder/CD Player no longer works and I had to get a new one from the manufacturer.
    4. once I bought songs from my iPhone, I opened iTunes and click on to search for available downloads - my songs have yet to download on iTunes on my computer.
    5 iTunes crashes
    6. when I run the diagnostic of iTunes, it does not recognize my cd/dvd burner.  I looked for the lower and upper filters and either they were not in the regedit or I deleted them according to other threads Microsoft Vista and then my computer would not restart properly and had to be restarted from a previous restore point.

    The other question was treated when I disabled my antivirus (Kaspersky 2009).

    3. I can not download the latest version of the software for my iPhone.  When trying to download or download and install, I get the message, "there was a problem downloading the software for the iPhone"IPhone of Heather".  The network connection timed out. Make sure your network settings are correct and your connection is active network, or try again later. "I tried several times without success, and it is not a problem with my internet as use it for other things before and after/during the download.

  • Question of CLSID for the Windows registry

    I have a ton of entries under

    HKEY_CLASSES_ROOT\CLSID\

    who have no default value set for InprocServer32

    Have I reason to think that, if no DLL is listed to load these entries are just too much room?

    can I remove all these with no ill effects?

    It seems to me that they were left by the prior uninstall such as JAVA, which leave a ton of garbage behind.

    I want to clean them manually - I didn't trust these automated registry cleaners.

    Thanks a lot for a simple answer to my question :)

    It's good to be wary of the registry cleaners, but one of the reasons why they are useless is that the registry has no need to be 'cleaned' unless there is a specific problem which must be addressed.  The entries refer to absorb a significant amount of disk space and have no ill effects whatsoever.

  • Question about backup registry cleaners...

    Hello

    Is it possible that I scan with a registry cleaner and it creates a problem in my pc but then

    the problem of surfaces 4 months later (for example when I install a new PC game)? At this point, I could

    have used the registry cleaner 16 times and have backups 16 - you try to restore the last registry

    backup and the problem won't get fixed, you must try each backup 16 - and if problem surfaces

    a year later, they could be 36 backups...

    Hope you see what I mean, honestly is it useful to use these registry cleaners?

    What is the answer of specialists?

    Thank you

    Karl

    KarlSu

    Lol the benefits outweigh the risks. If you have installed registry cleaner program, remove it and then run the SFC.exe tool.

    How to run the command "SFC/scannow" at the start or in Windows 8 and 8.1

    http://www.eightforums.com/tutorials/3047-sfc-scannow-command-run-Windows-8-a.html

  • important registry question

    Hello, I have windows vista and has recently contracted a virus that posed as my windows Defender... I opened regedit and tried to disable the virus (using directives acquired online)... While doing this, I accidentally deleted my file of registry .exe... how to restore this registry file in vista?  Any thoughts are appreciated.

    Hello

    you don't say if your vista is still running or not

    If it is still ongoing, read this

    You can try a SFC scan:

    Run the sfc/scannow command.

    http://support.Microsoft.com/kb/929833

    Use the (SFC.exe) System File Checker tool to determine which file is causing the problem and then replace the file. To do this, follow these steps:

    1. Open an elevated command prompt. To do this, click Start, click principally madeprograms,Accessories, right-clickguest, and then clickrun as administrator. If you are prompted for an administrator password or a confirmation, type the password, or clickallow.
    2. Type the following command and press ENTER:
      sfc/scannow

      The sfc/scannow command analyzes all protected system files and replaces incorrect versions with appropriate Microsoft versions

    If SFC detects the main problems it can't fix you may need to borrow a Microsoft dvd vista not an acer, HP etc. recovery disk and do a repair installation

    read the below tutorial on how to perform a repair installation

    This is done from a vista operating system

    http://www.Vistax64.com/tutorials/88236-repair-install-Vista.html

Maybe you are looking for

  • Photos does not open

    I can not open the Photos on a Mac app. It crashes instantly. Here is the error: Process: Photos [2150] Path: /Applications/Photos.app/Contents/MacOS/Photos ID: com.apple.Photos Version:? Generation information: PhotoApp-370042000000000 ~ 1 Code type

  • Problem with read/write satellite U400 - 12 p PSU40E DVD on LG GSA-U10N

    Hello again, Another serious problem is the LG GSA-U10N DVD combo drive that comes with mine U400. For some reason he has serious problems with reading and writing to DVD. Doesn't depend on whether the media is expensive or cheap. It seems to read an

  • Office Jet 4500 makes noise at startup

    When I start my Office jet 4500 it makes a rattling noise. But after a little he calms down and prints OK. Help please Alex

  • My Alienware does not start

    Hello. Yesterday I played a few games whit my new computer. Today morning, that it does not start when I am pressing the start button. Just a dim on the button and I can hear the motor trying to start but turns like a car. This computer is less than

  • All backup preferences

    Is it possible to backup all my preferences, and files, all my applications at once?I have an account through work. I like to keep my saved settings so that I can take with me if I ever elsewhere.Thank you!