Invalid Page Hashes For Midas64.dll

Drason
Drason ✭✭
in General module
Code Integrity determined that the page hashes of an image file are not valid. The file could be improperly signed without page hashes or corrupt due to unauthorized modification. The invalid hashes could indicate a potential disk device error.


File Name: \Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00055_002\midas64.dll


I had this problem with Total Security 2010 and after a search found this post saying that it was fixed in 2011 but I'm getting the same error with 2011 after installing it last night.


I installed Total Security 2011 as per the instructions here. The installation failed and said to use the Uninstall Tool, which I did, and then it installed fine.


Also, running chkdsk reported no errors.


Why am I still getting this error?

Comments

  • Unknown
    Unknown

    Hi,


    I believe you see that notification in EventViewer ? That's because the file in question (midas64.dll) is not digitally signed. We are already aware of this issue and has been escalated for resolution. It should be resolved with the release of the next build.


    I can assure you that the notification has no negative impact on your PC and that BitDefender is working properly.


    Kind regards,

  • Drason
    Drason ✭✭

    I thought it was supposd to be fixed with the 2011 relase according to the following from the 2010 Forum on the same topic:


    Hi,


    As I mentioned above, this is not an issue but a simple notification that the midas64.dll file is not recognized as being digitally signed.


    The notification was resolved with the release of our newest version, BitDefender 2011. Check the link below for instructions on how to upgrade for free:


    http://forum.bitdefender.com/index.php?showtopic=20941


    Topic closed.


    Kind regards,


    Obviously it wasn't.


    Also, I don't know if this is related or not but the folowing also occured after a reboot:


    Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.


    DETAIL -


    13 user registry handles leaked from \Registry\User\S-1-5-21-4171654686-1033996070-897387667-1001:


    Process 964 (\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\vsserv.exe) has opened key \REGISTRY\USER\S-1-5-21-4171654686-1033996070-897387667-1001\Software\BitDefender\BitDefender Total Security 2011


    Process 964 (\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\vsserv.exe) has opened key \REGISTRY\USER\S-1-5-21-4171654686-1033996070-897387667-1001\Software\BitDefender\BitDefender Total Security 2011


    Process 964 (\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\vsserv.exe) has opened key \REGISTRY\USER\S-1-5-21-4171654686-1033996070-897387667-1001\Software\BitDefender\BitDefender Total Security 2011


    Process 964 (\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\vsserv.exe) has opened key \REGISTRY\USER\S-1-5-21-4171654686-1033996070-897387667-1001\Software\BitDefender\BitDefender Total Security 2011


    Process 964 (\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\vsserv.exe) has opened key \REGISTRY\USER\S-1-5-21-4171654686-1033996070-897387667-1001\Software\BitDefender\BitDefender Total Security 2011


    Process 964 (\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\vsserv.exe) has opened key \REGISTRY\USER\S-1-5-21-4171654686-1033996070-897387667-1001\Software\BitDefender\BitDefender Total Security 2011


    Process 964 (\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\vsserv.exe) has opened key \REGISTRY\USER\S-1-5-21-4171654686-1033996070-897387667-1001\Software\BitDefender\BitDefender Total Security 2011


    Process 964 (\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\vsserv.exe) has opened key \REGISTRY\USER\S-1-5-21-4171654686-1033996070-897387667-1001\Software\BitDefender\BitDefender Total Security 2011


    Process 964 (\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\vsserv.exe) has opened key \REGISTRY\USER\S-1-5-21-4171654686-1033996070-897387667-1001\Software\BitDefender\BitDefender Total Security 2011


    Process 964 (\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\vsserv.exe) has opened key \REGISTRY\USER\S-1-5-21-4171654686-1033996070-897387667-1001\Software\BitDefender\BitDefender Total Security 2011


    Process 964 (\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\vsserv.exe) has opened key \REGISTRY\USER\S-1-5-21-4171654686-1033996070-897387667-1001\Software\BitDefender\BitDefender Total Security 2011


    Process 964 (\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\vsserv.exe) has opened key \REGISTRY\USER\S-1-5-21-4171654686-1033996070-897387667-1001\Software\BitDefender\BitDefender Total Security 2011


    Process 964 (\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\vsserv.exe) has opened key \REGISTRY\USER\S-1-5-21-4171654686-1033996070-897387667-1001\Software\BitDefender\BitDefender Total Security 2011


    :wacko: This happens everytime I reboot. However, it's usually 5 leaks. Although I did have 20 leaks once before. :blink:


    What gives?

  • Unknown
    Unknown
    edited November 2010

    Hi Arconus,


    I have created a ticket regarding the issue you encounter and sent you instructions via email on how to further investigate this matter.


    Please send me the requested log files along with a screenshot of the error you receive in response to my email.


    Your ticket ID is: 201011151007503.


    Regards,

  • nicolaas
    nicolaas

    Is there a solution for this warning?


    I do have the same warnings in windows 7-64. Only 5 handles in my case.


    Here is the text from the logbook:


    Logboekname: Application


    SourceBron: Microsoft-Windows-User Profiles Service


    Date: 14-3-2011 12:08:46


    id:1530


    Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.


    DETAIL -


    5 user registry handles leaked from \Registry\User\S-1-5-21-1340842915-3806721762-2351003733-1001:


    Process 960 (\Device\HarddiskVolume3\Program Files\BitDefender\BitDefender 2011\vsserv.exe) has opened key \REGISTRY\USER\S-1-5-21-1340842915-3806721762-2351003733-1001\Software\BitDefender\BitDefender Internet Security 2011


    Process 960 (\Device\HarddiskVolume3\Program Files\BitDefender\BitDefender 2011\vsserv.exe) has opened key \REGISTRY\USER\S-1-5-21-1340842915-3806721762-2351003733-1001\Software\BitDefender\BitDefender Internet Security 2011


    Process 960 (\Device\HarddiskVolume3\Program Files\BitDefender\BitDefender 2011\vsserv.exe) has opened key \REGISTRY\USER\S-1-5-21-1340842915-3806721762-2351003733-1001\Software\BitDefender\BitDefender Internet Security 2011


    Process 960 (\Device\HarddiskVolume3\Program Files\BitDefender\BitDefender 2011\vsserv.exe) has opened key \REGISTRY\USER\S-1-5-21-1340842915-3806721762-2351003733-1001\Software\BitDefender\BitDefender Internet Security 2011


    Process 960 (\Device\HarddiskVolume3\Program Files\BitDefender\BitDefender 2011\vsserv.exe) has opened key \REGISTRY\USER\S-1-5-21-1340842915-3806721762-2351003733-1001\Software\BitDefender\BitDefender Internet Security 2011


    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">


    <System>


    <Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" />


    <EventID>1530</EventID>


    <Version>0</Version>


    <Level>3</Level>


    <Task>0</Task>


    <Opcode>0</Opcode>


    <Keywords>0x8000000000000000</Keywords>


    <TimeCreated SystemTime="2011-03-14T11:08:46.448936300Z" />


    <EventRecordID>51531</EventRecordID>


    <Correlation ActivityID="{00000100-0000-0003-E322-BE2028E2CB01}" />


    <Execution ProcessID="484" ThreadID="4548" />


    <Channel>Application</Channel>


    <Computer>Nico-PC</Computer>


    <Security UserID="S-1-5-18" />


    </System>


    <EventData Name="EVENT_HIVE_LEAK">


    <Data Name="Detail">5 user registry handles leaked from \Registry\User\S-1-5-21-1340842915-3806721762-2351003733-1001:


    Process 960 (\Device\HarddiskVolume3\Program Files\BitDefender\BitDefender 2011\vsserv.exe) has opened key \REGISTRY\USER\S-1-5-21-1340842915-3806721762-2351003733-1001\Software\BitDefender\BitDefender Internet Security 2011


    Process 960 (\Device\HarddiskVolume3\Program Files\BitDefender\BitDefender 2011\vsserv.exe) has opened key \REGISTRY\USER\S-1-5-21-1340842915-3806721762-2351003733-1001\Software\BitDefender\BitDefender Internet Security 2011


    Process 960 (\Device\HarddiskVolume3\Program Files\BitDefender\BitDefender 2011\vsserv.exe) has opened key \REGISTRY\USER\S-1-5-21-1340842915-3806721762-2351003733-1001\Software\BitDefender\BitDefender Internet Security 2011


    Process 960 (\Device\HarddiskVolume3\Program Files\BitDefender\BitDefender 2011\vsserv.exe) has opened key \REGISTRY\USER\S-1-5-21-1340842915-3806721762-2351003733-1001\Software\BitDefender\BitDefender Internet Security 2011


    Process 960 (\Device\HarddiskVolume3\Program Files\BitDefender\BitDefender 2011\vsserv.exe) has opened key \REGISTRY\USER\S-1-5-21-1340842915-3806721762-2351003733-1001\Software\BitDefender\BitDefender Internet Security 2011


    </Data>


    </EventData>


    </Event>


    One warning today, 5 warnings yesterday. Normally 2 a 3 warnings each day.


    Regards


    Nico

All Time Leaders

Categories

Defenders of the month