Skip to main content

I was looking in the Event Viewer and I saw a twistee labeled Audit Failure. I didn’t remember seeing that one before, so I opened it up and it appears to be referencing a Webroot file.

Code integrity determined that the image hash of a file is not valid.  The file could be corrupt due to unauthorized modification or the invalid hash could indicate a potential disk device error.

File Name:    \Device\HarddiskVolume5\ProgramData\WRData\e30968e.dat    

So what does this mean? Is it a concern?

I’m not sure what HardiskVolume5 is. I presume this the C drive. But the curious thing is I don’t find a file named e30968e.dat under the ProgramData\WRData folder.

Thanks

Hello @Kev914 

 

I don’t think it’s anything to worry about I have seen it a few times over the years and maybe something was updated and it’s a Temp file but if you are concerned contact Webroot support and they will let you know for sure.

 

Webroot Support:

Submit a ticket

Call 1-866-612-4227

Note: When submitting a Support Ticket, Please wait for a response from Support. Putting in another Support Ticket on this problem before Support responses will put your first Support Ticket at the end of the queue.

 

Thanks,


Reply