Windows Log Help, please.

[Deleted User]

Hello - I came across this 'warning' and it advised investigation:


"+ System - Provider [ Name] Microsoft-Windows-User Profiles Service [ Guid] {89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}
EventID 1530 Version 0 Level 3 Task 0 Opcode 0 Keywords 0x8000000000000000 - TimeCreated [ SystemTime] 2011-06-20T17:59:28.354008900Z
EventRecordID 33344 Correlation - Execution [ ProcessID] 1012 [ ThreadID] 5012
Channel Application Computer Christine-TOSH - Security [ UserID] S-1-5-18

- EventData

Detail 1 user registry handles leaked from \Registry\User\S-1-5-21-653336087-2845228957-1664773364-1001: Process 1576 (\Device\HarddiskVolume2\Program Files\SUPERAntiSpyware\SASCore64.exe) has opened key \REGISTRY\USER\S-1-5-21-653336087-2845228957-1664773364-1001\Software\SUPERAntiSpyware.com\SUPERAntiSpyware\SABUpdate."

I'm not sure what to do with it and any help or advice would be very much appreciated, thank you.

Crimson

RussJK

Don't think it's necessarily anything suspicious or malicious:
http://support.microsoft.com/kb/947238

I would just uninstall Superantispyware, and use the portable version when you want it:
http://www.superantispyware.com/sasportable.php

How's your computer going these days?

[Deleted User]

Thanks (again!) Russ JK.

My computer seems to be going well. I made notes and I've been following the advice you gave previously - with good success. (I'm extra cautious now.)

I'll do as you suggest and uninstall Superantispyware and install it when needed.

This forum is A++++++++++++++++++++++++++

Crimson

RussJK

I probably suggested ClearCloud or put it on for you (the webfilter), but just so you know they're cancelling the free service at the start of September. They give instructions on how to remove it from your computer (clearclouddns.com). Personally I'm going to use it until the date nears, then try a similar service.

Just so you know! It's fine to keep using it until the 1st of September.

[Deleted User]

Thank you, RussJK. I'll keep a note of that for 1st September. I've done as you suggest and have uninstalled Superantispyware. I've used your helpful link for the portable version. Martin (of Moneysaving fame) should be paying you for all your expertise in this forum!

Thank you again

Crimson