Announcement: New Knowledge Base

4 June 2020: We are pleased to announce the launch of a new Knowledge Base, Changelogs for Business Security Products, where you can find more details, such as bugfixes or new features, about the most recent releases of our business-related products.

Event 1530 in Event Viewer on client shutdown

Every windows client running F-secure Client Security Premium receives the following Event Viewer warning entry when the machine it shut down.


Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. 



1 user registry handles leaked from \Registry\User\S-1-5-21-459771017-740262780-2989623380-1000:
Process 1244 (\Device\HarddiskVolume2\Program Files (x86)\F-Secure\Common\FSHDLL32.EXE) has opened key \REGISTRY\USER\S-1-5-21-459771017-740262780-2989623380-1000




This event always takes place when reboot or shutting down the machine. It does not interrupt in the functionality of the machine. But I rather not see warnings in my event viewer on a clean machine.


The clients are running Windows 7 SP1 with the latest patches. The F-secure version is: F-Secure Client Security Premium 11.60.

Best Answer

  • BenBen Posts: 2,640
    Accepted Answer

    Hello Damusa,


    Here is the reference from Microsoft on this error.


    Please open a support ticket with an fsdiag so that our support can investigate better this behavior.

This discussion has been closed.