Bit of a ramble

[shrimply]

Hi, this is probably the most nonsensical post you've had but i'm sightly concerned although probably over nothing.

 

When I started up my laptop 10 minutes ago I got a strange message, 11/15 came up as white writing on the black but not right at the top of the screen as usual, closer to the middle, then I got a file direction thing.

 

which included config, but didn't have time to read anything else.

 

And then I got the thing up installing updates, so presumed it had something to do with that but still concerned I went and checked in security centre and it says the last update was installed on the 13th.

 

SO now I don't know what to do, I will run the usual spyware checks, but ( I know you hate to hear this) I reallt don't think there is anything untoward on the system.

 

The only change I can think of making yesterday was I installed openoffice 3.0

[Guest Wolfeymole]

Go into Control Panel/ Administrative settings/ Event Viewer/ Windows Logs/ Application and tell us what it says Shrimps.

[shrimply]

Thanks, what exactly do you want, there was two warnings as I switched off the laptop last night and they sound bad so I'll start with them

 

"Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.

 

DETAIL -

7 user registry handles leaked from \Registry\User\S-1-5-21-3120081814-4107144378-2643684691-1000:

Process 1136 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3120081814-4107144378-2643684691-1000

Process 960 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3120081814-4107144378-2643684691-1000

Process 1136 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3120081814-4107144378-2643684691-1000\Software\Microsoft\SystemCertificates\trust

Process 696 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3120081814-4107144378-2643684691-1000\Software\Microsoft\SystemCertificates\Root

Process 1136 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3120081814-4107144378-2643684691-1000\Software\Microsoft\SystemCertificates\Root

Process 1136 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3120081814-4107144378-2643684691-1000\Software\Microsoft\SystemCertificates\SmartCardRoot

Process 1136 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3120081814-4107144378-2643684691-1000\Software\Policies\Microsoft\SystemCertificates"

 

Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.

 

DETAIL -

1 user registry handles leaked from \Registry\User\S-1-5-21-3120081814-4107144378-2643684691-1000_Classes:

Process 960 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3120081814-4107144378-2643684691-1000_CLASSES

[BeeCeeBee]

Hi Shrimply,

 

Are your date and time showing correctly right now?

 

What do you mean by

which included config, but didn't have time to read anything else.

?

[shrimply]

Time and date are fine, and I really don't looked like possibly the directions to a registry entry, or something, I didn't get much of a chance to look at it.

[RandyL]

From what little I could find this error is related to a user profile and can usually be ignored if it does not persist. A bug in other words.

 

If you don't keep getting it don't worry about it.

 

Either way it's not malware related.

[shrimply]

I've just checked the windows update info and its been updated windows did install two updates yesterday, one of which was the windows update agent, so hopefully that's all it was.

 

The two warning I posted were the only recent ones in the event viewer so I'm guessing I'm worrying over nothing, thanks