Solved

Security Event Log

Posted on 2010-08-17
4
5,699 Views
Last Modified: 2012-05-10
Hi,

Using Server 2008 R2, Windows 7 Pro

On the client machine when I closed a legal management software i use.:

Seems like the following error is logged:

Log Name:      Security
Source:        Microsoft-Windows-Security-Auditing
Date:          8/17/2010 8:42:30 AM
Event ID:      6281
Task Category: System Integrity
Level:         Information
Keywords:      Audit Failure
User:          N/A
Computer:      Computer1.DOMAIN.LOCAL
Description:
Code Integrity determined that the page hashes of an image file are not valid. The file could be improperly signed without page hashes or corrupt due to unauthorized modification. The invalid hashes could indicate a potential disk device error.

File Name:      \Device\HarddiskVolume3\Windows\System32\l3codeca.acm      
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-A5BA-3E3B0328C30D}" />
    <EventID>6281</EventID>
    <Version>0</Version>
    <Level>0</Level>
    <Task>12290</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8010000000000000</Keywords>
    <TimeCreated SystemTime="2010-08-17T14:42:30.374913400Z" />
    <EventRecordID>49834</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="44" />
    <Channel>Security</Channel>
    <Computer>Computer1.DOMAIN.LOCAL</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">\Device\HarddiskVolume3\Windows\System32\l3codeca.acm</Data>
  </EventData>
</Event>

Could someone please indicate what does it mean.
Also a message pops up saying:

runtime error '5'
Invalid procedure call or argument.

Thanks
0
Comment
Question by:masdf123
  • 3
4 Comments
 
LVL 63

Accepted Solution

by:
SysExpert earned 500 total points
ID: 33455487
It means that something is wrong with the file

\Device\HarddiskVolume3\Windows\System32\l3codeca.acm  

and it may be caused by a disk starting to fail or by someone deliberately tampering with the file.

I would run full hardware diagnostics on the motherboard and hard drive, and also make an image of the machine ( or full backup ) so that it can be replaced if needed.

 I hope this helps !
0
 
LVL 63

Assisted Solution

by:SysExpert
SysExpert earned 500 total points
ID: 33455528
0
 
LVL 1

Author Comment

by:masdf123
ID: 33455574
What is the file used for?
0
 
LVL 63

Assisted Solution

by:SysExpert
SysExpert earned 500 total points
ID: 33455788
Apparently it is a codec for playing back  a specific type of video/audio.

You might consider renaming it to l3codeca.acm.old and see if the problem goes away

0

Featured Post

Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Today, still in the boom of Apple, PC's and products, nearly 50% of the computer users use Windows as graphical operating systems. If you are among those users who love windows, but are grappling to keep the system's hard drive optimized, then you s…
This article explains how to install and use the NTBackup utility that comes with Windows Server.
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
This Micro Tutorial will give you basic overview of the control panel section on Windows 7. It will depth in Network and Internet, Hardware and Sound, etc. This will be demonstrated using Windows 7 operating system.

773 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question