Jump to content

Security audit failure in a2hooks64.dll on Windows 7

Recommended Posts

Hi Emsisoft Support,

Event viewer has the following entry for each day for the past several months. Since it is an "Information" error, I had missed it previously.

Log Name:      Security
Source:        Microsoft-Windows-Security-Auditing
Date:          08/02/2019 10:19:23
Event ID:      6281
Task Category: System Integrity
Level:         Information
Keywords:      Audit Failure
User:          N/A
Computer:      new-PC
Code Integrity determined that the page hashes of an image file are not valid. The file could be improperly signed without page hashes or corrupt due to unauthorized modification. The invalid hashes could indicate a potential disk device error.

File Name:    \Device\HarddiskVolume1\Program Files\Emsisoft Anti-Malware\a2hooks64.dll    

Is this an issue with the Emsisoft Anti-Malware Home installation or a possible disk error as noted in the Description?



Link to comment
Share on other sites

On 2/8/2019 at 7:32 PM, CelticCoder said:

My only question is why this is logged on a daily basis? Is Emsisoft attempting this code injection into a system process each time that it runs?

That's correct. We don't exclude all system processes from injection in case they get replaced by malware, and since Windows won't allow injection when it's a legitimate system file with strict code signing requirements then it isn't going to cause any problems.

  • Like 1
Link to comment
Share on other sites

This topic is now closed to further replies.

  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Create New...