Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: Constant Audit Failures - Event ID 6281

18 Oct 2011   #1
Arthur Hucksake

Windows 7 Home Premium 64 Bit
Constant Audit Failures - Event ID 6281

Getting a bit concerned about something which keeps cropping up.

I get persistent audit failures that are being logged.

Code Integrity determined that the page hashes of an image file are not valid. The file could be improperly signed without page hashes or corrupt due to unauthorized modification. The invalid hashes could indicate a potential disk device error.

File Name: \Device\HarddiskVolume3\Windows\System32\sxs.dll

Is sxs.dll that Side By Side?

Might explain the constant Event ID 72

Activation context generation failed for "c:\program files\microsoft security client\MSESysprep.dll".Error in manifest or policy file "c:\program files\microsoft security client\MSESysprep.dll" on line 10. The element imaging appears as a child of element urn:schemas-microsoft-com:asm.v1^assembly which is not supported by this version of Windows.

Could this be down to Microsoft Security Essentials doing it's business?

My System SpecsSystem Spec
18 Oct 2011   #2
Arthur Hucksake

Windows 7 Home Premium 64 Bit

If so, can you suggest a good free alternative AV?
My System SpecsSystem Spec
18 Oct 2011   #3
Arthur Hucksake

Windows 7 Home Premium 64 Bit

The invalid hashes could indicate a potential disk device error.
part... worries me as my SSD has dropped a couple of marks in the WEI and don't know if a problem is brewing.

My System SpecsSystem Spec

18 Oct 2011   #4

win7 64bit

been getting the exact same sxs.dll error from some time last week,
disk checks out ok, used sysinternals sigcheck and the file is signed ok,
i think it was something that came with windows update last week,
formatted to check and the same sxs.dll problem came back with the latest windows updates, which one though im not sure.
or as you say it could be Microsoft Security Essentials which i reinstalled last
My System SpecsSystem Spec
18 Oct 2011   #5

win7 64bit

just an update, ive tracked my problem down to Realtek High Definition audio drivers.
removed them and the sxs.dll audit problem is gone
driver Version R2.66 or R2.65 triggers the error
My System SpecsSystem Spec
18 Oct 2011   #6
Arthur Hucksake

Windows 7 Home Premium 64 Bit

Ahh how strange, good to know. I am running 2.65s. Thanks for clearing that up. Really much appreciated. Have to look for 2.66 if they are around.
My System SpecsSystem Spec
12 Mar 2012   #7

Windows 7 Ultimate Signature Edition 64-bit

Has there been any update on this?

I'm at the latest driver version, R2.67, and I'm getting these errors often now.

When I just came back to my computer after leaving it for about 30 minutes, the screen had turned off, and it was unresponsive. Plugging in the keyboard in and out of various USB ports would not even light the keyboard up.

When I restarted the machine, it booted up fine. The event viewer logs had nary an error, except for about 5 consecutive audit failures of this exact type, each happening about an hour or so, the most recent one roughly right before the computer became unresponsive.

Needless to say, I don't have much else to go on as to why my computer did that.
My System SpecsSystem Spec
07 Oct 2012   #8

Windows 7 Home Premium x64 SP1

I've installed R2.50 (suggested drivers for my laptop on the MSI site) and I can't reproduce the problem anymore... :)
See Realtek High Definition Audio 2.70 Vista 64 - History -

My issue was:
- System

- Provider

[ Name] Microsoft-Windows-CodeIntegrity
[ Guid] {4EE76BD8-3CF4-44A0-A0AC-3937643E37A3}

EventID 3002

Version 0

Level 2

Task 1

Opcode 102

Keywords 0x8000000000000000

- TimeCreated

[ SystemTime] 2012-10-07T12:14:16.342773400Z

EventRecordID 6544


- Execution

[ ProcessID] 408
[ ThreadID] 5392

Channel Microsoft-Windows-CodeIntegrity/Operational

Computer Hexaae-MSI

- Security

[ UserID] S-1-5-19

- EventData

FileNameLength 48
FileNameBuffer \Device\HarddiskVolume3\Windows\System32\sxs.dll
My System SpecsSystem Spec
15 Sep 2013   #9

Windows 7 Pro 64bit

My friend had this issue, it has resolved his problem as well thanks.
It was slowing down his bootup and made live stream non functioning.
My System SpecsSystem Spec

 Constant Audit Failures - Event ID 6281

Thread Tools

Similar help and support threads
Thread Forum
Multiple Audit Failures for same Event ID
(If this is not the correct sub-forum, can an Admin please move it? Thanks) For various reasons, I chose to have a look at various event logs on my PC (Win7/Firefox). Should I be concerned that I have, literally, thousands of identical "Audit Failure" events (EventID - 4656, Source -...
Installation & Setup
Windows Update constant failures, Error 800736B3
Hello, I seem to be running into a popular issue with Windows Update- 800736B3. WU is not completely broken, as it's still able to install updates to Security Essentials and non-system software (IE11, Office). All system updates, however, are failing. I've ran SURT and SFC scan, but both didn't...
Windows Updates & Activation
Constant Error's in Event Viewer
Getting about 20-25 of theese a day, If somebody could help me get rid of them would be greatly appreciated. Session "Circular Kernel Context Logger" failed to start with the following error: 0xC0000035 Task Category: Session xmlns=""> ...
BSOD Help and Support
Desktop "resets" event 5038. Audit Failer
Hey guys I recently re installed win 7 home premium and a few days later when logging it said preparing desktop, as if it was the first time Ih ad logged in. When it finally logged in my desktop seemed to have been reset, it only had recycle bin, itunes (which had to reinstall after clicking it)...
General Discussion
Constant BSOD failures
Hi guys. I was wondering if you could please help with a problem I have. I recently built a new computer from scratch but am plagued by constant BSOD errors since I installed Windows 7. I have updated all my drivers, uninstalled programs that may not be compatible as recommended on other...
BSOD Help and Support

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 03:28.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App