Hi
I am not a very techy person, so could not understand much of the content of
the Event Viewer. However I am coping an event which was in the Event Viewer.
Hope you will understand this and help me.
===========================================================================
Log Name: Application
Source: Microsoft-Windows-User Profiles Service
Date: 11-08-2007 12:31:52
Event ID: 1530
Task Category: None
Level: Warning
Keywords: Classic
User: SYSTEM
Computer: Home
Description:
Windows detected your registry file is still in use by other applications or
services. The file will be unloaded now. The applications or services that
hold your registry file may not function properly afterwards.
DETAIL -
1 user registry handles leaked from
\Registry\User\S-1-5-21-3382313106-2304960546-27118925-1000_Classes:
Process 920 (\Device\HarddiskVolume3\Windows\System32\svchost.exe) has
opened key \REGISTRY\USER\S-1-5-21-3382313106-2304960546-27118925-1000_CLASSES
Event Xml:
<Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-User Profiles Service"
Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" EventSourceName="profsvc" />
<EventID Qualifiers="32768">1530</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2007-08-11T07:01:52.000Z" />
<EventRecordID>4937</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>Home</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData Name="EVENT_HIVE_LEAK">
<Data Name="Detail">1 user registry handles leaked from
\Registry\User\S-1-5-21-3382313106-2304960546-27118925-1000_Classes:
Process 920 (\Device\HarddiskVolume3\Windows\System32\svchost.exe) has
opened key \REGISTRY\USER\S-1-5-21-3382313106-2304960546-27118925-1000_CLASSES
</Data>
</EventData>
</Event>
===========================================================================
If this is not the information you were looking for, please let me know the
exact details you require, so that I can try to search them. Thanks once
again.