efswrt.dll invalid hashes 6281

[Bill]

I started getting this message on Event Viewer 12/9/15 and get it every 2 to 8 days:

Code Integrity determined that the page hashes of an image file are not valid. The file could be improperly signed without page hashes or corrupt due to unauthorized modification. The invalid hashes could indicate a potential disk device error.

File Name: \Device\HarddiskVolume2\Windows\System32\efswrt.dll
Event ID: 6281

The only image files I have, as far as I know, are tbi files. Does anyone know if this error is related to my tbi images?

[Bob Coleman]

I have no idea what any of this is about, but note that photographs and such are sometimes referred to as images.

[TeraByte Support]

it's using a generic term image file being a binary program file. you'd
check the signature on the file it's complaining about.


"Bill" wrote in message news:11193@public.image...

I started getting this message on Event Viewer 12/9/15 and get it every 2 to
8 days:

Code Integrity determined that the page hashes of an image file are not
valid. The file could be improperly signed without page hashes or corrupt
due to unauthorized modification. The invalid hashes could indicate a
potential disk device error.

File Name: \Device\HarddiskVolume2\Windows\System32\efswrt.dll
Event ID: 6281

The only image files I have, as far as I know, are tbi files. Does anyone
know if this error is related to my tbi images?

[Bill]

I ran sfc /scannow and it found no integrity violations. I will just watch to see if it happens again.