event ID 1530 in event viewer

peri

Hello,

 

Trialing FSAV2011, working ok except two minor things.

The second 'thing' I'll open up a separate post for, let's start with this one first.

 

On a clean machine after having installed FSAV 2011 I encountered event ID 1530 errors.

 

The exact wording of the messages:

 

Description:
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. 

 DETAIL -
 1 user registry handles leaked from \Registry\User\S-1-5-21-587718041-890799215-1629729019-1003_Classes:
Process 2956 (\Device\HarddiskVolume2\Program Files\F-Secure\Common\FSHDLL32.EXE) has opened key \REGISTRY\USER\S-1-5-21-587718041-890799215-1629729019-1003_CLASSES

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" />
    <EventID>1530</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2011-10-03T08:59:12.185666500Z" />
    <EventRecordID>71735</EventRecordID>
    <Correlation />
    <Execution ProcessID="1160" ThreadID="6116" />
    <Channel>Application</Channel>
    <Computer>THINKPAD</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData Name="EVENT_HIVE_LEAK">
    <Data Name="Detail">1 user registry handles leaked from \Registry\User\S-1-5-21-587718041-890799215-1629729019-1003_Classes:
Process 2956 (\Device\HarddiskVolume2\Program Files\F-Secure\Common\FSHDLL32.EXE) has opened key \REGISTRY\USER\S-1-5-21-587718041-890799215-1629729019-1003_CLASSES
</Data>
  </EventData>
</Event>

 

I'm aware of the kb article at: http://support.microsoft.com/kb/947238

 

What can be done to get rid of these error messages ?

daempii

I am wondering if you were able to get rid of this problem?