Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm receiving the following errors in the security event log on a windows 7 x32 machine.

There are a couple of them and I'm worried that it might indicate a coming drive failure.

Am I right to worry? Event below:

Log Name:      Security
Source:        Microsoft-Windows-Security-Auditing
Date:          12/16/2010 9:12:33 AM
Event ID:      5038
Task Category: System Integrity
Level:         Information
Keywords:      Audit Failure
User:          N/A
Computer:      ThisMachineName
Code integrity determined that the image hash of a file is not valid.  The file could be corrupt due to unauthorized modification or the invalid hash could indicate a potential disk device error.

File Name:  \Device\HarddiskVolume2\Windows\System32\drivers\DGIVECP.SYS    
Event Xml:
<Event xmlns="">
    <Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-A5BA-3E3B0328C30D}" />
    <TimeCreated SystemTime="2010-12-16T15:12:33.026367100Z" />
    <Correlation />
    <Execution ProcessID="4" ThreadID="44" />
    <Security />
    <Data Name="param1">\Device\HarddiskVolume2\Windows\System32\drivers\DGIVECP.SYS</Data>


There were a couple of different ones with the same issue: File Name: \Device\HarddiskVolume2\Windows\System32\drivers\SSPORT.SYS File Name: \Device\HarddiskVolume2\Windows\System32\drivers\CVPNDRVA.sys

The CVPNDRVA relates to Cisco VPN software, I believe both DGIVECP and SSPORT are related to a samsung printer.

I took a longer look and it appears that only these three drivers are referenced.

share|improve this question
up vote 1 down vote accepted

It appears that it's a dell printer driver component. Is it unsigned or something? I would just find the driver installer, extract, and compare to see if it's a patched library(bad) or a signing issue(not so bad).

reference on what owns this file:

share|improve this answer
I think you're right. It looks like it's limited to just a samsung printer driver and a cisco vpn client. No other files are mentioned. – NotMe Dec 16 '10 at 15:59
another approach is to run sfc /scannow to check MS owned libraries and fix – RobotHumans Dec 16 '10 at 16:06

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .