Event 1530 in Event Viewer on client shutdown

damusa

Every windows client running F-secure Client Security Premium receives the following Event Viewer warning entry when the machine it shut down.

 

Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. 

 

DETAIL - 

1 user registry handles leaked from \Registry\User\S-1-5-21-459771017-740262780-2989623380-1000:
Process 1244 (\Device\HarddiskVolume2\Program Files (x86)\F-Secure\Common\FSHDLL32.EXE) has opened key \REGISTRY\USER\S-1-5-21-459771017-740262780-2989623380-1000

 

--

 

This event always takes place when reboot or shutting down the machine. It does not interrupt in the functionality of the machine. But I rather not see warnings in my event viewer on a clean machine.

 

The clients are running Windows 7 SP1 with the latest patches. The F-secure version is: F-Secure Client Security Premium 11.60.

Ben

Hello Damusa,

 

Here is the reference from Microsoft on this error.

 

Please open a support ticket with an fsdiag so that our support can investigate better this behavior.