Event ID 1530 :: User Profile Service

My Experience:
This warning appeared multiple times in my event log:

Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterward.

DETAIL -
1 user registry handles leaked from \Registry\User\S-1-5-21-793170598-2248495922-3383009104-1011_Classes:
Process 972 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-793170598-2248495922-3383009104-1011_CLASSES


The Cause:
It is a side effect of upgrading directly from XP to Vista. There is an old utility UPHClean which is trying to do the same thing that was built into Vista. More information here.

The Fix:
Sadly, there is no fix, but it's simply how the operating system works. Do note that not all 1530 events are the same. The ones from winlogon.exe and svchost.exe can be safely ignored because this is normal behavior.

My Results:
Though it is adding to the numbers of events I have in my loge, I'm having no issues.

Cannot Move/Edit/Delete Files

My Experience:
I had problems moving, editing, and most of all deleting files that my computer told me that I had no permissions to. The way to give yourself permissions is grueling pain and takes about 10 clicks and typing. Oh, the misery.

The Cause:
Vista permissions weren't built to mesh with XP very well or in general so it doesn't allow you to do things that you should be able to do.

The Fix:
Best. Download. Ever. I take no credit for this little program/registry edit, and I love whoever made it. This simple button gets put in your right click menu and allows you to take permission of a file or a whole folder and all the files underneath it in one click... well two technically.

Click here to Take Ownership of Vista

My Results:
I've used this countless times to edit and delete files. For all the posts I have about removing things from the shell right click menu, this is 100x better than those are bad.

Virus Protection Not Found

My Experience:
Every time that I restart my computer, an annoying little pop up box would appear to tell me that I have no virus protection program on my computer when I obviously do have McAfee Security Center.

The Cause:
This gets pretty far down into being plain stupidity. Windows Defender does not refresh and update the fact that you have Virus software installed correctly.

The Fix:
There are several ways to avoid this problem, but I have found no way for Security Center to truly recognize the installed antivirus software.

The simplest way is to open Security Center by clicking the bubble that pops up and clicking "Change the way Security Center alerts me". Then select one of the other options so you do not see the annoying bubble at teh buttom of your screen. You may also miss other important notifications with this method.


This solution was advised, but did not end up working for me: restart the Security Center properly so that it can re-search for your antivirus software.

1. Click the start menu and type "services" then press enter.
2. Find the "Security Center" service and right click it and press properties then select "Disabled" from the Startup Type menu.
3. Restart your computer.
4. Type "services" and enter into the start menu again.
5. Find the "Security Center" service and right click > properties. Set the Startup Type to "Automatic (Delayed Start)".
   

My Results:
not done

Event ID 8193, 8210 :: System Restore

My Experience:
I was unable to create Restore Points. The following errors were in the Event Log:

Source: System Restore
Event ID 8193

Failed to create restore point on volume (Process = C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Descripton = Scheduled Checkpoint; Hr = 0x81000101).
OR
Failed to create restore point on volume (Process = C:\Windows\system32\svchost.exe -k netsvcs; Descripton = Windows Update; Hr = 0x81000101).
OR
Failed to create restore point on volume (Process = [some file and process] ; Descripton = [description]; Hr = [hexadecimal number]).

Source: System Restore
Event ID 8210

The scheduled restore point could not be created. Additional information: (0x81000101). [alternatively (0x800423f3)]


The Cause:

The Fix:

My Results:

Event ID 1008, 1010 :: Perflib

My Experience:
I experienced the following errors in the Event Log.

Source: Perflib
Event ID 1008

The Open Procedure for service "PNRPsvc" in DLL "C:\Windows\system32\pnrpperf.dll" failed. Performance data for this service will not be available. The first four bytes (DWORD) of the Data section contains the error code.

Source: Perflib
Event ID 1010

The Collect Procedure for the "EmdCache" service in DLL "C:\Windows\system32\emdmgmt.dll" generated an exception or returned an invalid status. The performance data returned by the counter DLL will not be returned in the Perf Data Block. The first four bytes (DWORD) of the Data section contains the exception code or status code.


The Cause:
The file at C:\Windows\system32\emdmgmt.dll is part of the ReadyBoost system in order to make your computer go faster by using flash memory or other things to speed up processes that usually wriet to your disk which is one of the slowest things your computer does.

It was weird because I don't even use this service, I have tried but all my flash drives and external HD were not fit for ReadyBoost.

The Fix:
- Disable readyboost

My Results:

Registry Editing with Caution

This is a disclaimer post for anybody attempting to edit the registry and how you can be safe doing so. If you are inexperienced at changing the registry or changing massive things, it is recommended that you back up the registry. Backing up the registry is synonymous with creating a restore point in Windows. This is the info about creating and using restore points from Microsoft.

Backing up the Registry

1. Click Start, type systempropertiesprotection in the Start Search box, and then press ENTER.
   If you are prompted for an administrator password or for a confirmation, type the password, or click Allow.
2. Wait for Windows to search for available disks and most recent restore points. In the System Properties dialog box, on the System Protection tab, click Create,
3. Type a name for the restore point and then click Create.
4. After the restore point has been created successfully, click OK two times.

Restoring the Registry

1. Click Start, type systempropertiesprotection in the Start Search box, and then press ENTER. If you are prompted for an administrator password or for a confirmation, type the password, or click Allow.
2. In the System Properties dialog box, on the System Protection tab, click System Restore,
3. In the System Restore dialog box select Choose a different restore point, and then click Next
4. Select the restore point that you want to use, and then click Next.
5. Confirm your restore point, and then click Finish System restore restores the selected Windows Vista configuration and then restarts the computer.
6. Log on to the computer. When the System Restore confirmation page appears, click OK.

Credit: http://support.microsoft.com/kb/322756

Random Other Context Menu Issues

My Experience:
I'm trying to clean up my right click menu in Windows Explorer (aka the context menu), and these are a few other ones that I wanted to remove that have options within the programs they originate from.


The Cause:
Pesky settings within programs.


The Fix:
WinRAR

1. Open WinRAR
2. Go to Options > Settings
3. Go to the last tab Integration
4. In the small box called Shell Integration there are options whether to include it at all, or make more specific settings by clicking "Context Menu Items..."

Microsoft Expression Media

1. Type "regedit" in the start menu and press enter.
2. Navigate to "HKEY_CLASSES_ROOT\AllFilesystemObjects\shellex\ContextMenuHandlers\" and delete SimpleShlExt
3. Navigate to "HKEY_CLASSES_ROOT\Drive\shellex\ContextMenuHandlers\" and delete SimpleShlExt

Other
If you're looking for a solution to removing something from the context menu, first check all of the options within the program that it is coming from. If you can find nothing, look at my other post about Groove and try to look for it in one of the registry folders mentioned.


My Results:
No more annoying WinRAR buttons!

Microsoft Office "Groove Folder Syncronation"

My Experience:
In my crusade to rid my right click context menu within Windows Explorer of all extra options, I want to get rid of the even more annoying option that reads "Groove Folder Synchronization" and has an annoying little green blurb next to it.


The Cause:
The program causes the registry to be edited.


The Fix:
This fix requires editing the registry and should be done with caution.

1. Type "regedit" in the start menu search box and hit enter.
2. Navigate to the following directories and delete "XXX Groove GFS Context Menu Handler XXX"

• HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\
• HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\
• HKEY_CLASSES_ROOT\Directory\shellex\ContextMenuHandlers\
• HKEY_CLASSES_ROOT\Directory\Background\shellex\ContextMenuHandlers\
• HKEY_CLASSES_ROOT\AllFilesystemObjects\shellex\ContextMenuHandlers\

And your problem will be fixed!


My Results:
Haven't seen the thing since and no adverse effects.

Removing McAfee Security Center "Scan"

My Experience:
McAfee Security Center made this terrible little "Scan" option that appears when you right click pretty much anything in Window Explorer. This shortcut in the context menu is just another annoying thing to pass when trying to get to something I want to use, since I scan all of my files on a schedule. I wanted it to be gone once and for all, but couldn't find a simple option within the program.


The Cause:
The virus scan program puts a few pesky little registry keys in your registry in order for these to show up.


The Fix:
This fix requires editing the registry and should be done with caution.

1. Type "regedit" in your start menu search box and press enter.
2. Navigate to "HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\" and delete the folder called McCtxMenu
3. Navigate to "HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\" and delete the folder called McCtxMenu
4. Exit the registry editor and you're done!

My Results:
No more annoying Scan button and no adverse effects!

Event ID 4100 :: Windows Backup

My Problem:
I was unable to back up my C drive onto my external hard drive by using the windows backup and restore system. I received the following error, and this is what was found in the Event Viewer:

Source: Windows Backup
Event ID: 4100

File backup failed because a shadow copy could not be created. The system might be low on resources. The error is: The writer experienced a transient error. If the backup process is retried, the error may not reoccur. (0x800423F3).

The Cause:
There are multiple causes for this error,


The Fix [note that this issue has several causes and several solutions]:

• Turn off the automatic backup before doing a manual update.
• Disable the back up service by typing services in the start menu and changing the "Windows Backup" service from being automatic and also stopping it.
• Delete all previous backups and shadow copies by...

My Results:
I had automatic backup disabled and cleared

Event ID 73, 75 :: Print Spooler / Cannot Install Print or Scan Device

My Experience:
I was getting constant Print Spooler Errors from my printer (Espon Stylus C88+) which was functional, since I had installed the printer prior to experiencing the error.

Source: Print Spooler
Event ID 73

The print spooler failed to verify printer driver package Microsoft XPS Document Writer for environment Windows NT x86. Win32 system error code 2 (0x2). This can occur after an operating system upgrade or because of data loss on the hard drive. The print spooler will try to regenerate the driver information from the driver store, which is where drivers are saved before they are installed. No user action is required.

Source: Print Spooler
Event ID 75

The print spooler failed to regenerate the printer driver information for driver Epson Stylus C88 Series (M) for environment Windows NT x86. Win32 system error code 1797 (0x705). This can occur after an operating system upgrade or because of data loss on the hard drive.
OR
The print spooler failed to regenerate the printer driver information for driver Microsoft XPS Document Writer for environment Windows NT x86. Win32 system error code 1797 (0x705). This can occur after an operating system upgrade or because of data loss on the hard drive.
OR
The print spooler failed to regenerate the printer driver information for driver [printing device] for environment Windows NT x86. Win32 system error code 1797 (0x705). This can occur after an operating system upgrade or because of data loss on the hard drive.


The Cause:
I was one of many who regret listening to another blog's advice about clearing disk space on your hard drive. I deleted the FileRespository folder which contains many of the drivers and files necessary to get "older" devices to work.

The Fix:
I am lucky enough to have two systems with the same OS, so I was able to copy all of the files I needed exactly from my laptop to my desktop. I understand that many people won't have that advantage. The best choice if you do have access to another computer with the same operating system is to copy the files located in "C:\Windows\System32\DriverStore\FileRepository" from that computer to the one experiencing issues. Or you can just copy the specific ones you need, butyou may experience issues down the road.

If you do NOT have an extra computer on hand with the same OS, you could probably use your Vista DVD to restore the files that were missing. I hope you can do it without reinstalling the OS completely. I couldn't find any when I was searching, but you could probably find copies of the folders in that

My Results:
I recieve no more Print Spooler Errors.

Event ID 9 :: iaStorv

My Experience:
I experienced sessions of lag or pauses on my computer following this error. After looking in my event log I found 2,434 instances of this error.

Source: iaStorV
Event ID: 9

The device, \Device\Ide\iaStor0, did not respond within the timeout period.


The Cause:
It appears to be connected to Intel RAID or Philips DVDRW drives.


The Fix:
Some people recommend switching the SATA cables if you are using a desktop, but another simpler solution is to alter the registry. (and as always use caution when altering the registry)

1. Click the Start Button in Vista and type "regedit" then hit enter.
2. Click OK on the UAC prompt if enabled.
3. Navigate through the folders to HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\
4. Find the iaStorV folder and delete the folder within called "Parameter"
5. Find the iaStor folder and delete the folder within called "Parameter"
6. Restart your computer

My Results:
After using this fix, there are no longer random pauses or lag. There have not been any more Event 9's in my Event Log, and no adverse effects on my cd drive or in general.