Event Type: Audit Failure

Anonymous
2016-06-30T20:24:37+00:00

Hi,

My System is Windows 7 SP1 Home Premium.  Recently the Event Viewer has shown the following Audit failure after every fresh startup after the system has been powered off:

Record Number     : 145537

Log Type          : Security

Event Type        : Audit Failure

Time              : 28/06/2016 18:57:39

Source            : Microsoft-Windows-Security-Auditing

Category          : 12290

Event ID          : 6281

User Name         :

Computer          : Chris-PC

Event Data Length : 0

Record Length     : 352

Event Description : Code Integrity determined that the page hashes of an image file are not valid. The file could be improperly signed without page hashes or corrupt due to unauthorized modification. The invalid hashes could indicate a potential disk device error.    File Name: \Device\HarddiskVolume3\ProgramData\Trusteer\Rapport\store\exts\RapportMS\baseline\RapportIaso.sys 

I have been in touch with IBM Trusteer Support but they have been unable to help - their initial suggestion was as follows:

In order to resolve this issue, please follow the steps below:
1. Run → Enter secpol.msc in the search box.
*Please note, that an error message may appear. Disregard it and wait for a few seconds until the "Local Security Policy" window appears. 
2.Open “Local Policies”.
3.Open “Audit Policy”.
4.Enter “Auditor privilege use”
5.Verify both check-boxes are unchecked.
6. Restart your computer.

However Windows 7 Home Premium does not have the the group policies editor 'secpol.msc' so I am unable to carry out their suggestion.   Because of this they advised I contact Microsoft.

I have ruled out 'disk error' by running HD Tune which found no errors on the hard drive.  IBM appear to have ruled out a problem with my malware protection (Avast 2016 anti-virus and Comodo Firewall) after I had sent the details to them.

The problem has occurred over the last few days (starting Monday 27 June 2016).

Any advice and suggestions would be much appreciated, thank you.

Windows for home | Previous Windows versions | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments
Answer accepted by question author
Anonymous
2016-07-31T03:11:24+00:00

Hello,

Thank you for keeping us updated.

It seems that the issue is resolved.

I appreciate your efforts and time.

Please do let us know if you need any assistance in regards to Windows.

Thank you

Was this answer helpful?

0 comments

60 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2016-07-11T14:13:37+00:00

    Works for me but took a long time for some reason.

    Wait a bit and check again.

    Was this answer helpful?

    0 comments
  2. Anonymous
    2016-07-11T14:04:43+00:00

    Hi ElderN,

    Unfortunately the link you kindly provided will not open beyond a page with an error message as follows:

    This item may not exist or is no longer available

    This item may have been deleted, expired or you may not have permission to view it.

    Contact the owner of this item for more information.

    Regards

    Was this answer helpful?

    0 comments
  3. Anonymous
    2016-07-11T13:48:21+00:00

    Hi ElderN,

    To use a misquote, Microsoft moves in mysterious ways.

    I don't think there is anything wrong with the files I uploaded to Dropbox.  As I have said, the programs concerned appear to working correctly and the integrity checker lets them through at the second attempt.

    Thanks for the offer of secpol.msc.  It is not included with Windows 7 Home Premium but is with the higher versions of the operating system.  I could try the file but read somewhere on-line that it is not compatible Home premium or lower.

    I'll download the file and report back.

    Regards.

    Was this answer helpful?

    0 comments
  4. Anonymous
    2016-07-11T13:25:47+00:00

    I don't know what it all means :-)  I was just curious to see a few problematic files to see if I could get some third party software to scan and complain about them for some reason.

    I installed Trusteer and scanned and looked at individual files thinking I might see one that was afflicted in some way but nothing came up for me. 

    That product has come up for issues/problems in the MS Answers communities before (and even in the Mac communities).

    My style is to make an effort to recreate problems and figure out how to fix them.  This help me keep from beginning potential solutions with the word "try" (a pet peeve).  But I can't seem to recreate any of your issues here yet.

    I put a copy of secpol.msc on my OneDrive and you can download it to your windows\system32 folder and see if it will launch (I can't test that either) and if it complains about some missing file(s) just tell me and I will upload them too:

    https://onedrive.live.com/?id=A8C24A4BD70DC25C%21107&cid=A8C24A4BD70DC25C

    Was this answer helpful?

    0 comments