Solved

Security Event Log

Posted on 2010-08-17
4
6,074 Views
Last Modified: 2012-05-10
Hi,

Using Server 2008 R2, Windows 7 Pro

On the client machine when I closed a legal management software i use.:

Seems like the following error is logged:

Log Name:      Security
Source:        Microsoft-Windows-Security-Auditing
Date:          8/17/2010 8:42:30 AM
Event ID:      6281
Task Category: System Integrity
Level:         Information
Keywords:      Audit Failure
User:          N/A
Computer:      Computer1.DOMAIN.LOCAL
Description:
Code Integrity determined that the page hashes of an image file are not valid. The file could be improperly signed without page hashes or corrupt due to unauthorized modification. The invalid hashes could indicate a potential disk device error.

File Name:      \Device\HarddiskVolume3\Windows\System32\l3codeca.acm      
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-A5BA-3E3B0328C30D}" />
    <EventID>6281</EventID>
    <Version>0</Version>
    <Level>0</Level>
    <Task>12290</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8010000000000000</Keywords>
    <TimeCreated SystemTime="2010-08-17T14:42:30.374913400Z" />
    <EventRecordID>49834</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="44" />
    <Channel>Security</Channel>
    <Computer>Computer1.DOMAIN.LOCAL</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">\Device\HarddiskVolume3\Windows\System32\l3codeca.acm</Data>
  </EventData>
</Event>

Could someone please indicate what does it mean.
Also a message pops up saying:

runtime error '5'
Invalid procedure call or argument.

Thanks
0
Comment
Question by:masdf123
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
4 Comments
 
LVL 63

Accepted Solution

by:
SysExpert earned 500 total points
ID: 33455487
It means that something is wrong with the file

\Device\HarddiskVolume3\Windows\System32\l3codeca.acm  

and it may be caused by a disk starting to fail or by someone deliberately tampering with the file.

I would run full hardware diagnostics on the motherboard and hard drive, and also make an image of the machine ( or full backup ) so that it can be replaced if needed.

 I hope this helps !
0
 
LVL 63

Assisted Solution

by:SysExpert
SysExpert earned 500 total points
ID: 33455528
0
 
LVL 1

Author Comment

by:masdf123
ID: 33455574
What is the file used for?
0
 
LVL 63

Assisted Solution

by:SysExpert
SysExpert earned 500 total points
ID: 33455788
Apparently it is a codec for playing back  a specific type of video/audio.

You might consider renaming it to l3codeca.acm.old and see if the problem goes away

0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

You may have a outside contractor who comes in once a week or seasonal to do some work in your office but you only want to give him access to the programs and files he needs and keep privet all other documents and programs, can you do this on a loca…
By default the complete memory dump option is disabled in windows . If we want to enable the complete memory dump for a diagnostic purpose, we have a solution for it. here we are using the registry method to enable this.
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
This Micro Tutorial will go in depth within Systems and Security in Windows 7 and will go into detail regarding Action Center, Windows Firewall, System, etc. This will be demonstrated using Windows 7 operating system.

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question