Security Widget & Audit Failure
HAI
LONG TIME USER OF BDTS. SINCE I WAS NOT COMFORTABLE WITH THE BDTS 2012, I WAS CONTINUING WITH BDTS 2011. RECENTLY GOT UPGRADED TO BDTS 2013. ON THIS NOTIFIED 2 THINGS.
1. WHEN WILL THIS SECURITY WIDGET WRONG NOTIFICATION WILL BE FIXED. STILL IT IS SHOWING 1 EVENT AS EVENTUALLY THERE ARE NO EVENTS.
2. MINE IS LAPTOP WITH WIN 7 (SP 1) 64 BITS. NOTICED ON THE EVENT VIEWER AUDIT FAILURE WITH BDTS 2013 ON EVERY BOOT. AS THIS WAS EVEN PRESENT WITH PREVIOUS PRODUCT BDTS 2011. SHORT CAP OF THOSE EVENTS.
AS WHEN BDTS 2011 WAS INSTALLED - ON THE BOOT IN EVENT VIEWER - AUDIT FAILURE
Log Name: Security
Source: Microsoft-Windows-Security-Auditing
Date: 13-05-2012 11:10:27
Event ID: 6281
Task Category: System Integrity
Level: Information
Keywords: Audit Failure
User: N/A
Computer: VISWAM-HP
Description:
Code Integrity determined that the page hashes of an image file are not valid. The file could be improperly signed without page hashes or corrupt due to unauthorized modification. The invalid hashes could indicate a potential disk device error.
File Name: \Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00085_003\midas64.dll
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-A5BA-3E3B0328C30D}" />
<EventID>6281</EventID>
<Version>0</Version>
<Level>0</Level>
<Task>12290</Task>
<Opcode>0</Opcode>
<Keywords>0x8010000000000000</Keywords>
<TimeCreated SystemTime="2012-05-13T05:40:27.987731300Z" />
<EventRecordID>43701</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="68" />
<Channel>Security</Channel>
<Computer>VISWAM-HP</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00085_003\midas64.dll</Data>
</EventData>
</Event>
AS WITH BDTS 2013 WAS INSTALLED - ON THE BOOT IN EVENT VIEWER - AUDIT FAILURE
Log Name: Security
Source: Microsoft-Windows-Security-Auditing
Date: 07-07-2012 17:15:46
Event ID: 6281
Task Category: System Integrity
Level: Information
Keywords: Audit Failure
User: N/A
Computer: VISWAM-HP
Description:
Code Integrity determined that the page hashes of an image file are not valid. The file could be improperly signed without page hashes or corrupt due to unauthorized modification. The invalid hashes could indicate a potential disk device error.
File Name: \Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00149_003\avcuf64.dll
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-A5BA-3E3B0328C30D}" />
<EventID>6281</EventID>
<Version>0</Version>
<Level>0</Level>
<Task>12290</Task>
<Opcode>0</Opcode>
<Keywords>0x8010000000000000</Keywords>
<TimeCreated SystemTime="2012-07-07T11:45:46.439589500Z" />
<EventRecordID>58497</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="44" />
<Channel>Security</Channel>
<Computer>VISWAM-HP</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">\Device\HarddiskVolume2\Program Files\Bitdefender\Bitdefender 2013\active virus control\Avc3_00149_003\avcuf64.dll</Data>
</EventData>
</Event>
KINDLY CLARIFY ABOUT THIS AUDIT FAILURE. AS EVEN CONTACTED WITH TECH SUPPORT. THEY TOO CANNOT ABLE TO CLARIFY, AS WITH ANSWER THAT THEY WILL FORWARD IT TO THE SENIOR.
HOPE SOME ANSWER WILL BE THERE.
Comments
-
Hello
Thank you for your feedback!
Both issues were escalated to our developers and the discussion will continue in the dedicated topics:
http://forum.bitdefender.com/index.php?sho...mp;hl=escalated
http://forum.bitdefender.com/index.php?sho...mp;hl=integrity
Have a great day!0
