Ethernet Products
Determine ramifications of Intel® Ethernet products and technologies
4874 Discussions

Intel® Network Adapter Driver for Windows® 10 Version: 25.2 (Latest) Date: 7/14/2020

WallabyJack
Beginner
9,586 Views

Installed on windows 10 latest release, latest patch ....

In event viewer ; Event id 5038 in  windows log->security

Code integrity determined that the image hash of a file is not valid. The file could be corrupt due to unauthorized modification or the invalid hash could indicate a potential disk device error.

File Name: \Device\HarddiskVolume3\Program Files\Intel\Wired Networking\NCS2\Agent\Coinstaller.dll

In Windows log->Applications and Services Logs->microsoft->windows->CodeIntegrity->Operationnal

a lot of event id 3004 folowed by event id 3089

 

3004: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\Installer\{FBDEEBC8-592A-415F-AD68-086A8EEFA433}\ARPPRODUCTICON.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

3089: Signature information for another event. Match using the Correlation Id.

Unstalling software (Proset 25.2) clear errors and functionnality...

Software and driver operating as expected - no problem to report

 

Just want to let you know... this is an annoying error...

0 Kudos
25 Replies
wblondel
Beginner
2,661 Views

We may not be the OP but we all share the same issue and the cause seems to be the same aswell.

I installed the previous version of the driver and the Windows Event Viewer isn't flooded anymore, and I don't have random resets of the network card either.

0 Kudos
n_scott_pearson
Super User
2,655 Views
Doesn't matter. Everyone's issue is different (whether you think so or not). Open your own conversation.
...S
0 Kudos
AlfredoS_Intel
Moderator
2,647 Views

Hi ADargon,

Thank you for post.

We are deeply sorry if you felt neglected regarding your post. Due to a possible system issue, we were not able to see your post. Your post is now reflecting, and we would like to ask some information from you:

Thank you for your insight, by the way, we will have that checked.

We need to get some logs from your system. It will tell us the different driver version and components installed on your system. Please download and run our Intel® System Support Utility from this page, https://downloadcenter.intel.com/download/25293/Intel-System-Support-Utility-for-Windows-. After running it, you will be given an option to save the logs to a text file, please do so and attach the file on your reply.

By the way, are you getting the same error as the original thread starter?

We look forward to hearing from you. If we do not get your reply, we will follow up after 3 business days.



Best Regards,

Alfred S

Intel® Customer Support


0 Kudos
ADargon
Beginner
2,640 Views

Alfred,

Attached are the logs from running the scanning tool. 

I did have the same experience as the OP and the security warning I am getting is:

Code integrity determined that the image hash of a file is not valid. The file could be corrupt due to unauthorized modification or the invalid hash could indicate a potential disk device error.

File Name: \Device\HarddiskVolume2\Program Files\Intel\Wired Networking\NCS2\Agent\Coinstaller.dll

XML

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-a5ba-3e3b0328c30d}" /> 
  <EventID>5038</EventID> 
  <Version>0</Version> 
  <Level>0</Level> 
  <Task>12290</Task> 
  <Opcode>0</Opcode> 
  <Keywords>0x8010000000000000</Keywords> 
  <TimeCreated SystemTime="2020-10-08T07:46:34.9008408Z" /> 
  <EventRecordID>21259</EventRecordID> 
  <Correlation /> 
  <Execution ProcessID="4" ThreadID="6608" /> 
  <Channel>Security</Channel> 
  <Computer>Plex-Server</Computer> 
  <Security /> 
  </System>
- <EventData>
  <Data Name="param1">\Device\HarddiskVolume2\Program Files\Intel\Wired Networking\NCS2\Agent\Coinstaller.dll</Data> 
  </EventData>
  </Event>

I am also experiencing random network disconnection with event 27 e1rexpress errors with the message
Intel(R) I210 Gigabit Network Connection
Network link is disconnected.

XML for this is below

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="e1rexpress" />
  <EventID Qualifiers="40964">27</EventID>
  <Version>0</Version>
  <Level>3</Level>
  <Task>0</Task>
  <Opcode>0</Opcode>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2020-10-08T05:22:53.4061170Z" />
  <EventRecordID>3358</EventRecordID>
  <Correlation />
  <Execution ProcessID="4" ThreadID="256" />
  <Channel>System</Channel>
  <Computer>Plex-Server</Computer>
  <Security />
  </System>
- <EventData>
  <Data />
  <Data>Intel(R) I210 Gigabit Network Connection</Data>
  <Binary>0000040002003000000000001B0004A00000000000000000000000000000000000000000000000001B0004A0</Binary>
  </EventData>
  </Event>
 

Hope this helps.
Andy

0 Kudos
AlfredoS_Intel
Moderator
2,634 Views

Hi ADargon,

Thank you for your reply and for the time that you have taken out of your busy schedule to provide us those information.

As much as we would like to help you on this thread, given that your error message is different and you have an additional concern with the adapter, it would be best if you create another thread. This thread’s issue is due for closure, and we would still want to continue helping you, so we would need your cooperation to just start a new thread, and we will be happy to help you.

We hope for your understanding regarding this.



Best Regards,

Alfred S

Intel® Customer Support


0 Kudos
Reply