Solved

Security Event Log

Posted on 2010-08-17
4
6,410 Views
Last Modified: 2012-05-10
Hi,

Using Server 2008 R2, Windows 7 Pro

On the client machine when I closed a legal management software i use.:

Seems like the following error is logged:

Log Name:      Security
Source:        Microsoft-Windows-Security-Auditing
Date:          8/17/2010 8:42:30 AM
Event ID:      6281
Task Category: System Integrity
Level:         Information
Keywords:      Audit Failure
User:          N/A
Computer:      Computer1.DOMAIN.LOCAL
Description:
Code Integrity determined that the page hashes of an image file are not valid. The file could be improperly signed without page hashes or corrupt due to unauthorized modification. The invalid hashes could indicate a potential disk device error.

File Name:      \Device\HarddiskVolume3\Windows\System32\l3codeca.acm      
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-A5BA-3E3B0328C30D}" />
    <EventID>6281</EventID>
    <Version>0</Version>
    <Level>0</Level>
    <Task>12290</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8010000000000000</Keywords>
    <TimeCreated SystemTime="2010-08-17T14:42:30.374913400Z" />
    <EventRecordID>49834</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="44" />
    <Channel>Security</Channel>
    <Computer>Computer1.DOMAIN.LOCAL</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">\Device\HarddiskVolume3\Windows\System32\l3codeca.acm</Data>
  </EventData>
</Event>

Could someone please indicate what does it mean.
Also a message pops up saying:

runtime error '5'
Invalid procedure call or argument.

Thanks
0
Comment
Question by:masdf123
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
4 Comments
 
LVL 63

Accepted Solution

by:
SysExpert earned 500 total points
ID: 33455487
It means that something is wrong with the file

\Device\HarddiskVolume3\Windows\System32\l3codeca.acm  

and it may be caused by a disk starting to fail or by someone deliberately tampering with the file.

I would run full hardware diagnostics on the motherboard and hard drive, and also make an image of the machine ( or full backup ) so that it can be replaced if needed.

 I hope this helps !
0
 
LVL 63

Assisted Solution

by:SysExpert
SysExpert earned 500 total points
ID: 33455528
0
 
LVL 1

Author Comment

by:masdf123
ID: 33455574
What is the file used for?
0
 
LVL 63

Assisted Solution

by:SysExpert
SysExpert earned 500 total points
ID: 33455788
Apparently it is a codec for playing back  a specific type of video/audio.

You might consider renaming it to l3codeca.acm.old and see if the problem goes away

0

Featured Post

Creating Instructional Tutorials  

For Any Use & On Any Platform

Contextual Guidance at the moment of need helps your employees/users adopt software o& achieve even the most complex tasks instantly. Boost knowledge retention, software adoption & employee engagement with easy solution.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Background Information Recently I have fixed file server permission issues for one of my client. The client has 1800 users and one Windows Server 2008 R2 domain joined file server with 12 TB of data, 250+ shared folders and the folder structure i…
When you try to share a printer , you may receive one of the following error messages. Error message when you use the Add Printer Wizard to share a printer: Windows could not share your printer. Operation could not be completed (Error 0x000006…
This Micro Tutorial will go in depth within Systems and Security in Windows 7 and will go into detail regarding Action Center, Windows Firewall, System, etc. This will be demonstrated using Windows 7 operating system.
This Micro Tutorial will give you a introduction in two parts how to utilize Windows Live Movie Maker to its maximum editing capability. This will be demonstrated using Windows Live Movie Maker on Windows 7 operating system.
Suggested Courses

617 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question