Jump to content

Recommended Posts

Posted

I'm using KIS 21.3.10.391 (j) on Win 7 SP2.

I see warnings in Event Viewer with Event ID 1530 after every Winlogon event.

-----------------------------

Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.  

 DETAIL - 
 5 user registry handles leaked from \Registry\User\S-1-5-21-3626183451-712689859-1435294722-1001:
Process 1832 (\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-3626183451-712689859-1435294722-1001
Process 1832 (\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-3626183451-712689859-1435294722-1001\Software\Policies\Microsoft\SystemCertificates
Process 1832 (\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-3626183451-712689859-1435294722-1001\Software\Microsoft\SystemCertificates\SmartCardRoot
Process 1832 (\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-3626183451-712689859-1435294722-1001\Software\Microsoft\SystemCertificates\ROOT
Process 1832 (\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-3626183451-712689859-1435294722-1001\Software\Microsoft\SystemCertificates\trust
---------------------------

 

Log from another day

---------------------------

Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.  

 DETAIL - 
 12 user registry handles leaked from \Registry\User\S-1-5-21-3626183451-712689859-1435294722-1001:
Process 1836 (\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-3626183451-712689859-1435294722-1001
Process 1836 (\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-3626183451-712689859-1435294722-1001
Process 1836 (\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-3626183451-712689859-1435294722-1001
Process 1836 (\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-3626183451-712689859-1435294722-1001\Software\Microsoft\SystemCertificates\My
Process 1836 (\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-3626183451-712689859-1435294722-1001\Software\Microsoft\SystemCertificates\CA
Process 1836 (\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-3626183451-712689859-1435294722-1001\Software\Policies\Microsoft\SystemCertificates
Process 1836 (\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-3626183451-712689859-1435294722-1001\Software\Policies\Microsoft\SystemCertificates
Process 1836 (\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-3626183451-712689859-1435294722-1001\Software\Policies\Microsoft\SystemCertificates
Process 1836 (\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-3626183451-712689859-1435294722-1001\Software\Microsoft\SystemCertificates\SmartCardRoot
Process 1836 (\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-3626183451-712689859-1435294722-1001\Software\Microsoft\SystemCertificates\ROOT
Process 1836 (\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-3626183451-712689859-1435294722-1001\Software\Microsoft\SystemCertificates\Disallowed
Process 1836 (\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-3626183451-712689859-1435294722-1001\Software\Microsoft\SystemCertificates\trust
------------------------

 

This repeats after every login.

 

Why do I get this warning and what should I do to fix it?

  • 3 weeks later...
Posted

@nwq

For Kaspersky issues related with the Operating  System your best option is Kaspersky Technical Support, the link is located at the top of this Webpage. Please see similar closed Topic → Warning event id 1530

Please sign in to comment

You will be able to leave a comment after signing in



Sign In Now


×
×
  • Create New...