Windows Vista Event ID 1530
Microsoft Product: Windows Operating System; Version: 6.0.6000.16386;Event ID: 1530; Event Source: Microsoft-Windows-User Profiles Service I got this computer a year ago through a Costco. After initial set up I started recieving the error on shutdown. Some application would not stop running. The error code would constantly change. I went into Administrative tools to figure the problem...At first it was hard to see where it was coming from:Log Name: ApplicationSource: Microsoft-Windows-User Profiles ServiceDate: 11/28/2008 8:00:33 PMEvent ID: 1530Task Category: NoneLevel: WarningKeywords: ClassicUser: SYSTEMComputer: Jeter-PCDescription:Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. DETAIL - 0 user registry handles leaked from \Registry\User\S-1-5-21-377006347-2916014423-2624685925-1000: Event Xml:<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" EventSourceName="profsvc" /> <EventID Qualifiers="32768">1530</EventID> <Version>0</Version> <Level>3</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2008-11-29T04:00:33.000Z" /> <EventRecordID>1033</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>Application</Channel> <Computer>Jeter-PC</Computer> <Security UserID="S-1-5-18" /> </System> <EventData Name="EVENT_HIVE_LEAK"> <Data Name="Detail">0 user registry handles leaked from \Registry\User\S-1-5-21-377006347-2916014423-2624685925-1000:</Data> </EventData></Event> This is how it looks nowLog Name: ApplicationSource: Microsoft-Windows-User Profiles ServiceDate: 11/5/2009 1:17:02 AMEvent ID: 1530Task Category: NoneLevel: WarningKeywords: ClassicUser: SYSTEMComputer: Jeter-PCDescription:Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. DETAIL - 6 user registry handles leaked from \Registry\User\S-1-5-21-377006347-2916014423-2624685925-1001:Process 1624 (\Device\HarddiskVolume1\WINDOWS\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-377006347-2916014423-2624685925-1001\Software\Hewlett-Packard\cefa7a96-bbc4-44f7-a6a9-ab9ce2584136Process 1624 (\Device\HarddiskVolume1\WINDOWS\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-377006347-2916014423-2624685925-1001\Software\Hewlett-Packard\cefa7a96-bbc4-44f7-a6a9-ab9ce2584136Process 1624 (\Device\HarddiskVolume1\WINDOWS\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-377006347-2916014423-2624685925-1001\Software\Hewlett-Packard\cefa7a96-bbc4-44f7-a6a9-ab9ce2584136Process 1624 (\Device\HarddiskVolume1\WINDOWS\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-377006347-2916014423-2624685925-1001\Software\Hewlett-Packard\cefa7a96-bbc4-44f7-a6a9-ab9ce2584136\CustomShortcutPoolDataProcess 1624 (\Device\HarddiskVolume1\WINDOWS\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-377006347-2916014423-2624685925-1001\Software\Hewlett-Packard\cefa7a96-bbc4-44f7-a6a9-ab9ce2584136\CustomShortcutPoolDataProcess 1624 (\Device\HarddiskVolume1\WINDOWS\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-377006347-2916014423-2624685925-1001\Software\Hewlett-Packard\cefa7a96-bbc4-44f7-a6a9-ab9ce2584136\CustomShortcutPoolData Event Xml:<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" EventSourceName="profsvc" /> <EventID Qualifiers="32768">1530</EventID> <Version>0</Version> <Level>3</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2009-11-05T09:17:02.000Z" /> <EventRecordID>22738</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>Application</Channel> <Computer>Jeter-PC</Computer> <Security UserID="S-1-5-18" /> </System> <EventData Name="EVENT_HIVE_LEAK"> <Data Name="Detail">6 user registry handles leaked from \Registry\User\S-1-5-21-377006347-2916014423-2624685925-1001:Process 1624 (\Device\HarddiskVolume1\WINDOWS\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-377006347-2916014423-2624685925-1001\Software\Hewlett-Packard\cefa7a96-bbc4-44f7-a6a9-ab9ce2584136Process 1624 (\Device\HarddiskVolume1\WINDOWS\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-377006347-2916014423-2624685925-1001\Software\Hewlett-Packard\cefa7a96-bbc4-44f7-a6a9-ab9ce2584136Process 1624 (\Device\HarddiskVolume1\WINDOWS\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-377006347-2916014423-2624685925-1001\Software\Hewlett-Packard\cefa7a96-bbc4-44f7-a6a9-ab9ce2584136Process 1624 (\Device\HarddiskVolume1\WINDOWS\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-377006347-2916014423-2624685925-1001\Software\Hewlett-Packard\cefa7a96-bbc4-44f7-a6a9-ab9ce2584136\CustomShortcutPoolDataProcess 1624 (\Device\HarddiskVolume1\WINDOWS\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-377006347-2916014423-2624685925-1001\Software\Hewlett-Packard\cefa7a96-bbc4-44f7-a6a9-ab9ce2584136\CustomShortcutPoolDataProcess 1624 (\Device\HarddiskVolume1\WINDOWS\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-377006347-2916014423-2624685925-1001\Software\Hewlett-Packard\cefa7a96-bbc4-44f7-a6a9-ab9ce2584136\CustomShortcutPoolData</Data> </EventData></Event> As I looked more into it in this last error the details mention spoolsv.exe....there are different ones such as svchost.exe, winlogon.exe ect. I have found 6 different registry errors for the same event. The spools works with the plug and play, that works with the Apple software for my iphone. If this is a registry issue then would my personal info be compromised and/or the errors get worse if ignored? Is this fixable?Did I buy a bad computer?Any help or ideas would be greatly appreciated... Thank You, XYLA39
November 6th, 2009 4:23am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics