Jump to content

Warning - Event ID 1530 - Registry handle leaks


Recommended Posts

I'm using KIS 21.3.10.391 (j) on Win 7 SP2.

I see warnings in Event Viewer with Event ID 1530 after every Winlogon event.

-----------------------------

Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.  

 DETAIL - 
 5 user registry handles leaked from \Registry\User\S-1-5-21-3626183451-712689859-1435294722-1001:
Process 1832 (\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-3626183451-712689859-1435294722-1001
Process 1832 (\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-3626183451-712689859-1435294722-1001\Software\Policies\Microsoft\SystemCertificates
Process 1832 (\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-3626183451-712689859-1435294722-1001\Software\Microsoft\SystemCertificates\SmartCardRoot
Process 1832 (\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-3626183451-712689859-1435294722-1001\Software\Microsoft\SystemCertificates\ROOT
Process 1832 (\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-3626183451-712689859-1435294722-1001\Software\Microsoft\SystemCertificates\trust
---------------------------

 

Log from another day

---------------------------

Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.  

 DETAIL - 
 12 user registry handles leaked from \Registry\User\S-1-5-21-3626183451-712689859-1435294722-1001:
Process 1836 (\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-3626183451-712689859-1435294722-1001
Process 1836 (\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-3626183451-712689859-1435294722-1001
Process 1836 (\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-3626183451-712689859-1435294722-1001
Process 1836 (\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-3626183451-712689859-1435294722-1001\Software\Microsoft\SystemCertificates\My
Process 1836 (\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-3626183451-712689859-1435294722-1001\Software\Microsoft\SystemCertificates\CA
Process 1836 (\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-3626183451-712689859-1435294722-1001\Software\Policies\Microsoft\SystemCertificates
Process 1836 (\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-3626183451-712689859-1435294722-1001\Software\Policies\Microsoft\SystemCertificates
Process 1836 (\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-3626183451-712689859-1435294722-1001\Software\Policies\Microsoft\SystemCertificates
Process 1836 (\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-3626183451-712689859-1435294722-1001\Software\Microsoft\SystemCertificates\SmartCardRoot
Process 1836 (\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-3626183451-712689859-1435294722-1001\Software\Microsoft\SystemCertificates\ROOT
Process 1836 (\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-3626183451-712689859-1435294722-1001\Software\Microsoft\SystemCertificates\Disallowed
Process 1836 (\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-3626183451-712689859-1435294722-1001\Software\Microsoft\SystemCertificates\trust
------------------------

 

This repeats after every login.

 

Why do I get this warning and what should I do to fix it?

Link to comment
Share on other sites

  • 3 weeks later...

Please sign in to comment

You will be able to leave a comment after signing in



Sign In Now


×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.