Solved

Registry leak

Posted on 2014-12-16
10
388 Views
Last Modified: 2014-12-17
Ever since last Tuesdays update load for Win7/64/Pro, and Acrobat and Flash etc., I've been getting the following at shutdown:

Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.  
 DETAIL -
 0 user registry handles leaked from \Registry\User\S-1-5-21-2987587682-1074968332-1067063631-1001:

This happens every shutdown. What would I get a message when no registry handles appear to be leaking. Went into registry and checked S-1-5-21-2987587682-1074968332-1067063631-1001. Found it under HCU\Software\Microsoft\Internet Explorer\InternetRegistry\User\S-1-5-21-2987587682-1074968332-1067063631-1001 . Default value was empty. Also found is same branch under \protected Storage System Provider and in three keys under Windows Search\ProcessedSearchRoots\0007.

Can someone tell me what this warning is being generated and how to make it stop -- occurs ONLY at shutdown. Thanks.
0
Comment
Question by:normanml
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
  • 2
  • +1
10 Comments
 
LVL 95

Expert Comment

by:John Hurst
ID: 40502505
I have Windows 7 and Windows 8.1, Office, Acrobat and so on. I have everything updated including Patch Tuesday last week. No issues at all.

So then see if you can determine what programs are causing issues. I would uninstall anything that you think is the issue, restart and reinstall.

Also:  Set up a new, test, Windows User Profile (Account). Log in as the new account. Shutdown. Do you still have errors?
0
 
LVL 24

Expert Comment

by:VB ITS
ID: 40502567
It's a benign warning, honestly. This warning just means that an application hasn't closed off a handle to the registry when shutting down. They have actually changed this from a Warning log type to Information log type in Windows 8.1 to avoid further confusion.

I would safely ignore unless you are finding some applications aren't saving their settings properly the next time you boot up from a shut down.

See here for more information: http://social.technet.microsoft.com/wiki/contents/articles/3134.user-profile-service-event-1530-the-windows-operating-system-detected-that-your-registry-file-is-still-in-use-by-other-applications-or-services.aspx?PageIndex=2
0
 
LVL 50

Expert Comment

by:jcimarron
ID: 40503100
normanml --
Last Tuesday's batch of Updates contained a corrupt Update.  It usually fouls up further Updates but maybe (long shot) is causing your Registry problem.
Here is how to uninstall the bad Update.  You probably should do this even if not the cause of your problem.
http://arstechnica.com/information-technology/2014/12/microsoft-withdraws-bad-windows-7-update-that-broke-future-windows-7-updates/
0
Simple, centralized multimedia control

Watch and learn to see how ATEN provided an easy and effective way for three jointly-owned pubs to control the 60 televisions located across their three venues utilizing the ATEN Control System, Modular Matrix Switch and HDBaseT extenders.

 
LVL 95

Expert Comment

by:John Hurst
ID: 40503195
I checked my Windows Updates and neither the problem update or its correction are installed on my Windows 7 computer. The problem update does not affect all Windows computers, and so may not be the cause of your issue.

Windows update are still working on my Windows 7 machine (two small ones just now).

However the update IS installed on my Windows 8 machine and (also per the arstechnica article) not causing any issue on Windows 8.
0
 
LVL 50

Expert Comment

by:jcimarron
ID: 40503335
John Hurst--
"I checked my Windows Updates and neither the problem update or its correction are installed on my Windows 7 computer."
The correction update (KB3024777) uninstalls KB3004394 and then uninstalls itself.  So there is no record of either.

"The problem update does not affect all Windows computers, and so may not be the cause of your issue."
I really do not see the purpose of your negative comment.  I have already said that using the correction update is a long shot, and in any event, should be used by normanml, if offered, to uninstall KB3004394
0
 
LVL 95

Expert Comment

by:John Hurst
ID: 40503382
Hi jcimarron - I did not intend my comment to be negative; merely additive. I had done Patch Tuesday updates on one Windows 7 machine within an hour of the updates being available. I just never saw any sign of the update and there was no succeeding update that happened to wipe it out. So I was (am) just offering that the problem update does not affect all machines.
0
 

Author Comment

by:normanml
ID: 40503796
I noted the two problematic updates -- the troublemaker and the one that removed the troublemaker. Neither affected me; didn't have  KB3004394 so no need for the other, which did not appear in the list of updates.

You'll notice that the warning/information reads "0 user registry handles leaked from..." So the warning is warning about something that did not happen. Can anyone explain that?

Searched in the registry for the key. It appears 843 times in the registry. And I simply could not find one application to hang it on and trouble shoot; it appears many times in what are clearly windows system keys.
0
 
LVL 95

Expert Comment

by:John Hurst
ID: 40503805
Are you able to restore to a prior point? That might clear the problem. I cannot readily explain the error message.
0
 
LVL 24

Accepted Solution

by:
VB ITS earned 500 total points
ID: 40503878
@normanml: Are you actually experiencing issues with any programs that aren't saving their settings? If not then you can safely ignore these warnings.

Like I said in my previous post, Microsoft have realised that the Warning log type was a mistake on their end and have changed these events to Information log types starting from Windows 8.1 to prevent people from thinking that something is actually wrong with their system. If you want to know why these events occur, have a look at the link in my previous post.
0
 

Author Closing Comment

by:normanml
ID: 40505363
VB: Everything seems to be working okay so I think I'll just follow your suggestion and keep working. Thanks.
0

Featured Post

Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A project that enables an administrator to perform actions within a user session context not just at the time of login but any time later on day(s) or week(s) later.
Windows 10 Creator Update has just been released and I have it working very well on my laptop. Read below for issues, fixes and ideas.
This Micro Tutorial will give you basic overview of the control panel section on Windows 7. It will depth in Network and Internet, Hardware and Sound, etc. This will be demonstrated using Windows 7 operating system.
In this video, viewers are given an introduction to using the Windows 10 Snipping Tool, how to quickly locate it when it's needed and also how make it always available with a single click of a mouse button, by pinning it to the Desktop Task Bar. Int…

690 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question