I was looking in the Event Viewer and I saw a twistee labeled Audit Failure. I didn’t remember seeing that one before, so I opened it up and it appears to be referencing a Webroot file.
Code integrity determined that the image hash of a file is not valid. The file could be corrupt due to unauthorized modification or the invalid hash could indicate a potential disk device error.
File Name: \Device\HarddiskVolume5\ProgramData\WRData\e30968e.dat
So what does this mean? Is it a concern?
I’m not sure what HardiskVolume5 is. I presume this the C drive. But the curious thing is I don’t find a file named e30968e.dat under the ProgramData\WRData folder.
Thanks
