A lot of fsamsi64.dll file auditing error is being displayed in the Microsoft Windows security auditing event viewer.<\/p>\n
"Code integrity determined that the image hash of a file is not valid. The file could be corrupt due to unauthorized modification or the invalid hash could indicate a potential disk devices error.<\/p>\n
File name: \\Device\\HardiskVolume\\ProgramFiles (x86)\\F-Secure\\Ultralight\\ulcore\\1701168861\\fsamsi64.dll"<\/p>\n
Or,<\/p>\n
Windows is unable to verify the image integrity of the file \\Device\\HarddiskVolume3\\Program Files (x86)\\F-Secure\\Client Security\\Ultralight\\ulcore\\1585820217\\fsamsi64.dll<\/b> because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.<\/p>\nResolution:<\/h3>\n
Statement from our developers:<\/b><\/u> "<\/em>Antimalware Scan Interface (AMSI) is an API that allows applications to request antimalware products installed on the computer to scan their data for harmful content, provided that such antimalware products have exposed their scanning services via AMSI.<\/em><\/p>\n Latest WithSecure products provide this scanning interface to the applications.<\/em><\/p>\n One of such applications is Windows Defender. Its manual scanning feature makes use of AMSI, loading the AMSI modules registered with the system into its processes.<\/em><\/p>\n However, the Defender itself has a security measure that prevents any DLLs which are not signed by Microsoft from being loaded into its processes. This means that in case a non-Microsoft AMSI provider is registered to the system, Defender will try to load it, but will reject it because it does not have a Microsoft signature, and an error will be written to the event log.<\/em><\/p>\n This appears to be an intentional design in Windows Defender to only allow Microsoft's own AMSI DLLs to be used with it. The event log error is a result of this design and can be ignored by the customers."<\/em><\/p>\n \u00a0<\/p>\n
<\/em><\/p>\n