Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Registry Handle Leak Hangs


  • Please log in to reply
2 replies to this topic

#1 Xirw

Xirw

  • Members
  • 105 posts
  • OFFLINE
  •  
  • Local time:04:21 AM

Posted 30 May 2015 - 11:16 AM

Hi, first of all thank you for making this type of forum since I mostly have problems with software conflicts and never really with malware.

 

Sometimes at random when I boot my pc, everything would freeze up so I would have to ctrl+alt+del then log off and back on again to fix it. This doesnt happen too often but enough to annoy me into fixing it.

 

The only event log I see around the time this happens are these:

 

"Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.  

 DETAIL -
 1 user registry handles leaked from \Registry\User\S-1-5-21-3965548825-2285127440-1969352065-1000:
Process 884 (\Device\HarddiskVolume4\Windows\System32\winlogon.exe) has opened key \REGISTRY\USER\S-1-5-21-3965548825-2285127440-1969352065-1000"

 

______________________________________________________________________________

 

"Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.  

 DETAIL -
 2 user registry handles leaked from \Registry\User\S-1-5-21-3965548825-2285127440-1969352065-1000:
Process 472 (\Device\HarddiskVolume4\Program Files\Sandboxie\SbieSvc.exe) has opened key \REGISTRY\USER\S-1-5-21-3965548825-2285127440-1969352065-1000
Process 1096 (\Device\HarddiskVolume4\Windows\System32\winlogon.exe) has opened key \REGISTRY\USER\S-1-5-21-3965548825-2285127440-1969352065-1000"

 

______________________________________________________________________________
 

Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.  

 DETAIL -
 3 user registry handles leaked from \Registry\User\S-1-5-21-3965548825-2285127440-1969352065-1000:
Process 1048 (\Device\HarddiskVolume4\Windows\System32\winlogon.exe) has opened key \REGISTRY\USER\S-1-5-21-3965548825-2285127440-1969352065-1000
Process 488 (\Device\HarddiskVolume4\Windows\System32\services.exe) has opened key \REGISTRY\USER\S-1-5-21-3965548825-2285127440-1969352065-1000
Process 872 (\Device\HarddiskVolume4\Program Files\Sandboxie\SbieSvc.exe) has opened key \REGISTRY\USER\S-1-5-21-3965548825-2285127440-1969352065-1000

 

______________________________________________________________________________

 

This can happen either at boot time or just a random time when I am on. I see sandboxie is listed so I'm not sure if the problem is on their end or just something with me. Or even nothing to do with sandboxie at all.

 

 

 

 

Running Perfmon results in this error:

 

Error:
 
An error occured while attempting to generate the report.
   
The Data Collector Set or one of its dependencies is already in use.

 

Attached Files



BC AdBot (Login to Remove)

 


#2 jcgriff2

jcgriff2

  • BSOD Kernel Dump Expert
  • 1,052 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New Jersey Shore
  • Local time:04:21 AM

Posted 31 May 2015 - 03:02 AM

Do you have the most recent version of Sandboxie installed?

 

What anti-virus, firewall are you using?  Any chance that you have an Internet Security Suite installed (Norton, McAfee, etc...)?

 

I've seen those types of entries many, many times - including in my own systems; on my systems at least, they were rather benign messages.

 

I would suspect freezing is due to "unknown hardware failure" - maybe RAM or HDD; possibly even heat.

 

Event Viewer logs primarily record OS, software & security related items.  About the closest think you'll find to hardware failure in the EVTX logs - I/O errors.

 

Be sure that all Windows Updates are installed as well.


Microsoft MVP 2009-2015

#3 Xirw

Xirw
  • Topic Starter

  • Members
  • 105 posts
  • OFFLINE
  •  
  • Local time:04:21 AM

Posted 31 May 2015 - 11:21 AM

Thanks for the reply. I have actually found out literally yesterday that I may have a failing PSU since in the past at random times my computer would crash to a black screen (my monitor loses connection to my computer), my fans would be running full blast, and I lose all power in my USBs (because nothing lights up). Computer is still on but I cant do anything with it so I have to end up doing a hard reset.

 

I made sure numerous times too that all the connnections inside my pc were in tight too.

 

I do have bitdefender installed but I have had it for a long time with no issues. I installed the latest version of sandboxie today and so far my boots have been without any hangs.

 

My OS has the latest updates too as well. I use all SSD's basically but I have a regular hard drive that I use for storage as well that has some bad sectors in it. But other than that my ssds are practically new.


Edited by tg1489, 31 May 2015 - 11:22 AM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users