error (event 1517) shut off or reboot on xp

[mantra]

Hi
i have windows xp sp2 with the last update

sometime (often) when i shut down or reboot my pc , i get an error and in eventvwr.msc i get event 1517 , user NT AUTHORITY\SYSTEM


{QUOTE-> You saved the register of user while an application or service was still using it during the disconnection. The memory of the register has not been released. The register will be downloaded will no longer be used. <-QUOTE}

{QUOTE-> The error is often caused by services running as a user account. Try to configure the services as LocalService or NetworkService account. <-QUOTE}

what can i do ?
can i avoid it?

thanks

[PROROOTECT]

Nothing, Mantra!

This is your anti-virus.

Yours PROROOTECT:thumb:

[Firebytes]

mantra,

Do you already have UPHClean (http://www.microsoft.com/downloadS/details.aspx?familyid=1B286E6D-8912-4E18-B570-42470E2F3582&displaylang=en) installed? If not you might try installing it.

[mantra]

{QUOTE-> Nothing, Mantra!

This is your anti-virus.

Yours PROROOTECT:thumb: <-QUOTE}
how does you know?
i use nod32 2.7

[mantra]

{QUOTE-> mantra,

Do you already have UPHClean (http://www.microsoft.com/downloadS/details.aspx?familyid=1B286E6D-8912-4E18-B570-42470E2F3582&displaylang=en) installed? If not you might try installing it. <-QUOTE}
no i did not install it

i found a blog with version 2 http://blogs.technet.com/uphclean/ and in the microsoft there is version 1.6

but how can i know which service did not stop during the log off

[PROROOTECT]

Hello, Mantra,

I have this same events. I have AntiVir Guard ( watch with manliness ) among others ...

My Windows XP SP2 is anorexic & clean.

Yours PROROOTECT

[mantra]

{QUOTE-> Hello, Mantra,

I have this same events. I have AntiVir Guard ( watch with manliness ) among others ...

My Windows XP SP2 is anorexic & clean.

Yours PROROOTECT <-QUOTE}
thanks
but there is a way to know wich service is in use during the log off
i mean you know it's antivir
but i would like to know which is? maybe nod32

[PROROOTECT]

Mantra... I do not know.

Perhaps AntiVir, perhaps another one of my applications ... It is nothing. Forget, forget.

Cool. PROROOTECT:thumb:

[mantra]

thanks for you kindness
i installed UPHClean-Setup.msi

and i get this
{QUOTE-> The following handles in user profile hive my computer\my name (S-1-5-21-1292428093-789336058-1801674531-1004) have been remapped because they were preventing the profile from unloading successfully:

svchost.exe (964)
HKCU (0x370) <-QUOTE}

[PROROOTECT]

Mantra, yes, now you have in your Task Manager an additional process, and in Services the additional service.

It will send you additional warnings every day ...

Will you have this new occupation in your life?

PROROOTECT:thumb:

[mantra]

{QUOTE-> Mantra, yes, now you have in your Task Manager an additional process, and in Services the additional service.

It will send you additional warnings every day ...

Will you have this new occupation in your life?

PROROOTECT:thumb: <-QUOTE}
well thanks

by the way you rock man

[axial]

Mantra, fwiw I've also noticed the 1517 errors a lot lately and I also use NOD (version 3).