Security Widget & Audit Failure

sailorvisu

HAI

LONG TIME USER OF BDTS. SINCE I WAS NOT COMFORTABLE WITH THE BDTS 2012, I WAS CONTINUING WITH BDTS 2011. RECENTLY GOT UPGRADED TO BDTS 2013. ON THIS NOTIFIED 2 THINGS.

1. WHEN WILL THIS SECURITY WIDGET WRONG NOTIFICATION WILL BE FIXED. STILL IT IS SHOWING 1 EVENT AS EVENTUALLY THERE ARE NO EVENTS.

2. MINE IS LAPTOP WITH WIN 7 (SP 1) 64 BITS. NOTICED ON THE EVENT VIEWER AUDIT FAILURE WITH BDTS 2013 ON EVERY BOOT. AS THIS WAS EVEN PRESENT WITH PREVIOUS PRODUCT BDTS 2011. SHORT CAP OF THOSE EVENTS.

AS WHEN BDTS 2011 WAS INSTALLED - ON THE BOOT IN EVENT VIEWER - AUDIT FAILURE

Log Name: Security

Source: Microsoft-Windows-Security-Auditing

Date: 13-05-2012 11:10:27

Event ID: 6281

Task Category: System Integrity

Level: Information

Keywords: Audit Failure

User: N/A

Computer: VISWAM-HP

Description:

Code Integrity determined that the page hashes of an image file are not valid. The file could be improperly signed without page hashes or corrupt due to unauthorized modification. The invalid hashes could indicate a potential disk device error.

File Name: \Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00085_003\midas64.dll

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-A5BA-3E3B0328C30D}" />

<EventID>6281</EventID>

<Version>0</Version>

<Level>0</Level>

<Task>12290</Task>

<Opcode>0</Opcode>

<Keywords>0x8010000000000000</Keywords>

<TimeCreated SystemTime="2012-05-13T05:40:27.987731300Z" />

<EventRecordID>43701</EventRecordID>

<Correlation />

<Execution ProcessID="4" ThreadID="68" />

<Channel>Security</Channel>

<Computer>VISWAM-HP</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00085_003\midas64.dll</Data>

</EventData>

</Event>

AS WITH BDTS 2013 WAS INSTALLED - ON THE BOOT IN EVENT VIEWER - AUDIT FAILURE

Log Name: Security

Source: Microsoft-Windows-Security-Auditing

Date: 07-07-2012 17:15:46

Event ID: 6281

Task Category: System Integrity

Level: Information

Keywords: Audit Failure

User: N/A

Computer: VISWAM-HP

Description:

Code Integrity determined that the page hashes of an image file are not valid. The file could be improperly signed without page hashes or corrupt due to unauthorized modification. The invalid hashes could indicate a potential disk device error.

File Name: \Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00149_003\avcuf64.dll

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-A5BA-3E3B0328C30D}" />

<EventID>6281</EventID>

<Version>0</Version>

<Level>0</Level>

<Task>12290</Task>

<Opcode>0</Opcode>

<Keywords>0x8010000000000000</Keywords>

<TimeCreated SystemTime="2012-07-07T11:45:46.439589500Z" />

<EventRecordID>58497</EventRecordID>

<Correlation />

<Execution ProcessID="4" ThreadID="44" />

<Channel>Security</Channel>

<Computer>VISWAM-HP</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">\Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00149_003\avcuf64.dll</Data>

</EventData>

</Event>

KINDLY CLARIFY ABOUT THIS AUDIT FAILURE. AS EVEN CONTACTED WITH TECH SUPPORT. THEY TOO CANNOT ABLE TO CLARIFY, AS WITH ANSWER THAT THEY WILL FORWARD IT TO THE SENIOR.

HOPE SOME ANSWER WILL BE THERE.

rootkit

Hello

Thank you for your feedback!

Both issues were escalated to our developers and the discussion will continue in the dedicated topics:

http://forum.bitdefender.com/index.php?sho...mp;hl=escalated

http://forum.bitdefender.com/index.php?sho...mp;hl=integrity

Have a great day!