Need help with Avast registry leak, event id 1530

[Guest]

Hi folks,
It seems every second warning event in my Windows 7 event viewer is the following Event id 1530.

-----------------------------------------------------------------------------------------------
"Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.

DETAIL -
1 user registry handles leaked from \Registry\User\S-1-5-21-3220376804-2733943922-2519475030-1001:
Process 1424 (\Device\HarddiskVolume1\Program Files\AVAST Software\Avast\AvastSvc.exe) has opened key \REGISTRY\USER\S-1-5-21-3220376804-2733943922-2519475030-1001\Software\Piriform\CCleaner"
-------------------------------------------------------------------------------------------------

The leak appears to be related to my Avast antivirus and Ccleaner and has been going on for several weeks now but I don't know how or why. Apart from these numerous registry leak warnings and an occasional DNS Client event (id 1014) my pc is running fine.

I am using Ccleaner version v5.11.5408 (64 bit) and Avast Pro Antivirus version 11.1.2241.

Can someone tell me how I can fix this problem please?

Thanks.

 

[Phillip Corcoran]

It's Avast that's the culprit, Ccleaner is just the "victim" so to speak.

Don't ask me how it's done, but try excluding Ccleaner from the Avast scheduled or manual virus scan.
Failing that, or if it does not stop the issue, uninstall Avast and replace it with something else (eg Comodo).

Apart from anything else, I recently proved that Avast can considerably increase Windows startup time (adding up to 30 seconds on some Win7 systems). I know I'm right because I was able to reproduce the problem by installing/uninstalling it several times on 3 different computers - same result every time.

 

[Guest]

Hi Phillip,
Avast does allow me to add url or filepath exclusions, but I don't know what filepath to add because I haven't a clue which Ccleaner file needs to be excluded. I'll have to do some more research on it.

I don't think Avast interferes with my bootup time because from the moment I push the on button on my pc to when the Windows log on screen appears is only around 45 seconds which I think is a fairly quick. Anyway, I'll have to stick with Avast for a while yet because I have the paid for version.

 

[Guest]

Just updating my thread because I finally kinda solved this problem, I think.

It seems that the warning event (id 1530) on my pc is generated at shutdown because Windows 7 finds a registry key still in use by my Avast AV program, and forces it closed, (or something like that).

I found if I simply disable Avast first, just prior to shutting down my Windows 7 pc, I no longer get the 1530 warning in Event Viewer, so problem solved. I know the event was only a warning and most people choose to ignore it, but I'm the kind of person that can't do that. Right now my Event Viewer is almost completely free of errors and events except for one persistent warning which keeps annoying me. It's a DNS related problem (event id1014) which I'll need to research further.

Cheers.