Audit Failure, System Integrity, Code Integrity Checker detected ... klhkum.dll [Closed]

[Flood and Flood's wife]

#Me too

File Name:    \Device\HarddiskVolume3\Program Files (x86)\Common Files\Kaspersky Lab\klhk\klhk_x64\klhkum.dll    
Audit Failure    5/03/2020 7:13:43 PM    6281    System Integrity    "Code Integrity determined that the page hashes of an image file are not valid. The file could be improperly signed without page hashes or corrupt due to unauthorized modification. The invalid hashes could indicate a potential disk device error.”
 

klhkum.dll, v 20.3.63.0, FD: System Interceptors PDK usermode service interceptor

klhkum.dll

[Bibblos]

hy, me too forum french kaspersky antivirus v20, not same version klhknum.dll in windows/ system32 and klhk_x64  20.2.120 and 20.3.63.0 so….

[richbuff]

Hello FLOOD,

I am guessing that you notified Tech Support, so the major reason for my reply here is to say that is the nicest dog pic that I have seen, ever, bar none!  :)

[Surgeon100]

Solution ??

[Surgeon100]

Hello FLOOD,

I am guessing that you notified Tech Support, so the major reason for my reply here is to say that is the nicest dog pic that I have seen, ever, bar none!  :)

And ?? Solution of that ??

[Flood and Flood's wife]

Hello FLOOD, The major reason for my reply here is to say that is the nicest dog pic that I have seen, ever, bar none!  :)

Hello @richbuff, 

🤗 Thank you!!

Here’s the other one:

Best buds😍

Flood🐳

[Flood and Flood's wife]

 richbuff wrote:

Hello FLOOD, The major reason for my reply here is to say that is the nicest dog pic that I have seen, ever, bar none!  :)

And ?? Solution of that ??

 Hello @Surgeon100,

Welcome again!

Are you asking me or @richbuff🤔

[Berny]

Solution ??

There is a similar issue in the French Section.
I kindly asked @Bibblos to keep us informed concerning his request to K-Lab Tech Support

[Flood and Flood's wife]

Hello @scyles: 

Note, same alert:

 

---

 

@Surgeon100, 

• The issue was identified by @o4kapumo, Средство проверки целостности кода обнаружило... klhkum.dll, (impacted) at last count, including you = 8 (that’s folks who’ve actually posted), there’s always more who either contact Technical Support direct & or never post in the Community. 
• If you haven’t contacted Technical Support please do so, as always, they’ll require detailed history, images, traces & a GSI & Windows Logs. 

Thank you🙏

Flood🐳

[Bibblos]

Looking at the installation of the patch (i), It lacks the copy of the klhkum.dll file in windows / system32, the other 2 kl .... sys are well copied in system32 / drivers, bingo Here is what is missing in patch i: “which was present on patch e”

A file copy 'C:\Program Files (x86)\Common Files\Kaspersky Lab\klhk\klhk_x64\klhkum.dll'->'C:\windows\system32\klhkum.dll' operation has started.

 

Support on : ID INC000011341527  and i called support

[Flood and Flood's wife]

Hello @Bibblos, 

Thank you🙏 !

Flood🐳

[Flood and Flood's wife]

Todays data🤔

[Schulte]

+2
My two Win7 systems show the same message.
The Win10 machines are not affected.

[Surgeon100]

So no solution up to now but a lot of talking senseless !

[Surgeon100]

And typical the honks from Kaspersky !

They want an GSI as years before,

and then they criticize some software which is working since years,

but nothing concerning the problem !

So I will never send GSIs, because I know my PC and everything is top 

and up to date !

GSIs are only for some housewifes who dont know anything !

[klhkum00]

Workaround

The problem with the file C: \ Program Files (x86) \ Common Files \ Kaspersky Lab \ klhk \ klhk_x64 \ klhkum.dll is solved simply (until KAV will fix):

1. Turn off Settings / Advanced / Self-Defense / Enable Freeze Protection
2. Rename or delete the file klhkum.dll (for example, rename it to klhkum.dll0)
3. Turn on protection again Settings / Advanced / Self-defense / Enable freeze protection
4. Reboot

Now everything works, KAV, hopefully next week will release an update that will fix this.

[Flood and Flood's wife]

No,  @klhkum00, now everything does not work.

Also, despite MS pulling the plug on W7, atm Kaspersky continues to support W7.

Thank you🙏

Flood🐳

[klhkum00]

“Ошибки в журнале пропадают. Но это не решает проблемы с интерфейсом windows” - “Errors in the log disappear. But this does not solve the problems with the windows interface.”

https://community.kaspersky.com/kaspersky-internet-security-21/sredstvo-proverki-celostnosti-koda-obnaruzhilo-klhkum-dll-moved-7479/index2.html

“now everything does not work” - What does not work? :)

I apologize if you have other problems - I will not continue.
If you do what I wrote - there will be at least errors in the log and it will be possible to log in not under the admin

 

 

[Surgeon100]

No,  @klhkum00, now everything does not work.

Also, despite MS pulling the plug on W7, atm Kaspersky continues to support W7.

Thank you🙏

Flood🐳

Thank God its Friday !

[Flood and Flood's wife]

Hello @klhkum00,

• 1 “there will be at least errors in the log” is the opposite of what I expect when the issue is resolved. 

(For me), the goal is to not  have any “Audit Failure, System Integrity, Code Integrity Checker “ errors in the System Event logs. 

• 2 I’ve never had a problem logging in/on with any profile:

Standard User

Elevated Administrator

Administrator

 

Thank you🙏

Flood🐳

[Surgeon100]

What is this ?? There were never problems with the profile !

There are only some messages in security events and nothing more !

Without any problems of function !

 

[Flood and Flood's wife]

The impacts have been defined throughout the course of the Topic. 

[Berny]

@Bibblos Thank you for sharing in the FR Section that K-Lab will provide the fix with Patch “j” around mid April