I was looking in the Event Viewer and I saw a twistee labeled Audit Failure. I didn’t remember seeing that one before, so I opened it up and it appears to be referencing a Webroot file.
Code integrity determined that the image hash of a file is not valid. The file could be corrupt due to unauthorized modification or the invalid hash could indicate a potential disk device error.
File Name: \Device\HarddiskVolume5\ProgramData\WRData\e30968e.dat
So what does this mean? Is it a concern?
I’m not sure what HardiskVolume5 is. I presume this the C drive. But the curious thing is I don’t find a file named e30968e.dat under the ProgramData\WRData folder.
Best answer by TripleHelixView original
I don’t think it’s anything to worry about I have seen it a few times over the years and maybe something was updated and it’s a Temp file but if you are concerned contact Webroot support and they will let you know for sure.
Submit a ticket
Note: When submitting a Support Ticket, Please wait for a response from Support. Putting in another Support Ticket on this problem before Support responses will put your first Support Ticket at the end of the queue.