Hi PepiMK,

The new hive manager sounds good to me. However I still think that you are missing my point. The PE_C_username hives do not have any handles open by Spybot or any other program. I no this because the hive can be unloaded manually using regedit. This means that Spybot is not trying to unload the PE_C hives. Please try this to confirm my findings.

1. Create a folder called Test under Documents and Settings.
2. Copy the hive that I uploaded to you in NTUSER.zip to the Test folder.
3. Run Spybot. You do not need to run a scan.
4. Open regedit and look in HKEY_USERS. You will see the PE_C_TEST hive.
5. Exit Spybot.
6. Refresh regedit and look in HKEY_USERS. PE_C_TEST will still be there.
7. Manually unload the hive using Unload Hive in regedit.

To further show that the PE_C hive does not have an open handle try this.
Repeat steps 1-4 then use regedit to manually unload the PE_C_TEST hive before exiting Spybot. In fact if you have any other user account SID hives that Spybot has loaded, you can also manually unload them as well using regedit.

I think this confirms that the both PE_C and SID hives loaded by Spybot are not locked due to an open handle. Since the SID hives now unload everytime and the PE_C hives never unload, I have to conclude that Spybot is not trying to unload them. I hope this helps and thanks for your support...