CelticCoder

Security audit failure in a2hooks64.dll on Windows 7

Recommended Posts


Hi Emsisoft Support,

Event viewer has the following entry for each day for the past several months. Since it is an "Information" error, I had missed it previously.

Log Name:      Security
Source:        Microsoft-Windows-Security-Auditing
Date:          08/02/2019 10:19:23
Event ID:      6281
Task Category: System Integrity
Level:         Information
Keywords:      Audit Failure
User:          N/A
Computer:      new-PC
Description:
Code Integrity determined that the page hashes of an image file are not valid. The file could be improperly signed without page hashes or corrupt due to unauthorized modification. The invalid hashes could indicate a potential disk device error.

File Name:    \Device\HarddiskVolume1\Program Files\Emsisoft Anti-Malware\a2hooks64.dll    

Is this an issue with the Emsisoft Anti-Malware Home installation or a possible disk error as noted in the Description?

Regards,

Liam

Share this post


Link to post
Share on other sites

I'm glad to hear that you found the answer to your question. If you need anything else, then be sure to let us know. ;)

  • Like 1

Share this post


Link to post
Share on other sites

Yes, the issue is addressed. My only question is why this is logged on a daily basis? Is Emsisoft attempting this code injection into a system process each time that it runs?

Thanks, by the way, for the prompt response!

Share this post


Link to post
Share on other sites
On 2/8/2019 at 7:32 PM, CelticCoder said:

My only question is why this is logged on a daily basis? Is Emsisoft attempting this code injection into a system process each time that it runs?

That's correct. We don't exclude all system processes from injection in case they get replaced by malware, and since Windows won't allow injection when it's a legitimate system file with strict code signing requirements then it isn't going to cause any problems.

  • Like 1

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.