Author Topic: guard64.dll- hashes of an image file are not valid  (Read 8976 times)

Offline drejwithyou

  • Comodo Member
  • **
  • Posts: 31
guard64.dll- hashes of an image file are not valid
« on: February 04, 2013, 03:46:36 AM »
After installation of a CIS v6 I am experiencing the following audit failure in a event viewer under security log:

"Code Integrity determined that the page hashes of an image file are not valid. The file could be improperly signed without page hashes or corrupt due to unauthorized modification. The invalid hashes could indicate a potential disk device error.

File Name:   \Device\HarddiskVolume5\Windows\System32\guard64.dll"

Anyone also is experiencing the similar issue. Should I be concerned?

Win 8 64-bit with a home media.

Now I see it in a previous post. Sorry for a double posting. It still not fixed.

« Last Edit: February 04, 2013, 03:58:20 AM by drejwithyou »

Offline EricJH

  • Global Moderator
  • Comodo's Hero
  • *****
  • Posts: 25161
Re: guard64.dll- hashes of an image file are not valid
« Reply #1 on: February 06, 2013, 09:10:45 PM »
Try running checkdisk on the affected partition and see where that takes us. After that try running Diagnostics from within CIS.

Offline DrHaze

  • Malware Research Group
  • Comodo's Hero
  • *****
  • Posts: 466
  • Once A Comodo!Always A Comodo!Go Comodo!!
Re: guard64.dll- hashes of an image file are not valid
« Reply #2 on: February 08, 2013, 11:12:37 PM »
This problem exists even in x64 windows 8/CIS 5.12.2599 installations. Anyone using CIS 6(2708) or 5(2599) on Windows 8 x64 will have this error. I do not know if it occurs on Windows 7/Vista x64 It would be helpful if some Win7/Vista x64 users checked their event viewers and report back here on this thread so a bug report can be filled out. I have seen it so far on three windows 8 x64 Pc's in the event viewer. two with cis 6 2708 and one with cis 5 2599. Diagnostics will pass believe it or not on both 5 or 6 CIS.

AMD Phenom x4 3.3GHZ 12Gig Ram
Intel Core 2 Quad 2.5ghz 8Gig Ram
Windows 8 x64 Pro

Offline Radaghast

  • Star Group
  • Comodo's Hero
  • *****
  • Posts: 4068
Re: guard64.dll- hashes of an image file are not valid
« Reply #3 on: February 09, 2013, 01:39:27 AM »
Nothing to be seen under Windows 7 x64. I tried turning everything on, but still nothing. I'll watch it over the next day or so.
“Don’t worry if it doesn’t work right. If everything did, you’d be out of a job.”

Offline RGandy1884

  • Newbie
  • *
  • Posts: 24
Re: guard64.dll- hashes of an image file are not valid
« Reply #4 on: June 06, 2013, 01:36:45 PM »
Windows 8 x64.  I have this same problem.

And I'm VERY concerned after yesterday's events, regardless of what happened to get these messages in the viewer.

Offline EricJH

  • Global Moderator
  • Comodo's Hero
  • *****
  • Posts: 25161
Re: guard64.dll- hashes of an image file are not valid
« Reply #5 on: June 07, 2013, 06:36:20 PM »
I checked the logs of my Windows 8 x64 and found no such event while running CIS 6.1.276867.2813. It is unfortunate that drejwithyou did not report back if running checkdisk solved the problem for him or not.

Offline drejwithyou

  • Comodo Member
  • **
  • Posts: 31
Re: guard64.dll- hashes of an image file are not valid
« Reply #6 on: June 27, 2013, 04:35:45 PM »
CIS version 6.2.282872.2847.
This problem with an audit failure in a security log is still not solved.



Regards,

win 8 pro with a media center,

Offline algorithm

  • Newbie
  • *
  • Posts: 2
Re: guard64.dll- hashes of an image file are not valid
« Reply #7 on: July 27, 2013, 08:36:51 PM »
My updated Win8x64 machine is now giving me this audit failure.  In previous versions of CIS on Win8x64 I hadn't noticed this in the Event Viewer; I first noticed it running CIS v6.1.14723.2813.
Windows 8.1 Pro 64-bit - Comodo Internet Security v6.3 - Kaspersky Internet Security 2014 - Shadow Defender

Offline drejwithyou

  • Comodo Member
  • **
  • Posts: 31
Re: guard64.dll- hashes of an image file are not valid
« Reply #8 on: September 30, 2013, 05:44:54 AM »
CIS v. 6.3.294583.2937

Notice of an an audit failure of an image file in the security log does still appears.

Win 8 pro 64 bit.

[attachment deleted by admin]

Offline RedAphex

  • Newbie
  • *
  • Posts: 1
Re: guard64.dll- hashes of an image file are not valid
« Reply #9 on: February 26, 2015, 12:34:45 PM »
I'm seeing this too. Did anyone ever find a solution?

Offline EricJH

  • Global Moderator
  • Comodo's Hero
  • *****
  • Posts: 25161
Re: guard64.dll- hashes of an image file are not valid
« Reply #10 on: February 26, 2015, 06:38:13 PM »
It's still there and there is no solution other than to live with it.  :-\

Offline Jayman007

  • Newbie
  • *
  • Posts: 8
Re: guard64.dll- hashes of an image file are not valid
« Reply #11 on: September 24, 2015, 02:03:51 AM »
I have this same issue on win 8.1 running comodo fw 8.2.0.4703

Offline EricJH

  • Global Moderator
  • Comodo's Hero
  • *****
  • Posts: 25161
Re: guard64.dll- hashes of an image file are not valid
« Reply #12 on: September 24, 2015, 04:58:26 AM »
Comodo still has not fixed this. It's not a risk but it looks sloppy.

Offline Gothmoth

  • Comodo Family Member
  • ***
  • Posts: 52
Re: guard64.dll- hashes of an image file are not valid
« Reply #13 on: January 29, 2016, 05:11:14 AM »
29.01.2016..... issue is still not fixed.

3 years.. why do we report issues when nobody at comodo cares? :(

Offline iamme99

  • Comodo's Hero
  • *****
  • Posts: 231
Re: guard64.dll- hashes of an image file are not valid
« Reply #14 on: July 25, 2016, 01:08:35 PM »
I just upgraded to Win10 from Win 8.1 Pro X64. 

I am seeing the same error!

 

Free Endpoint Protection
Seo4Smf 2.0 © SmfMod.Com Smf Destek