| Event Id | 5 |
| Source | datascrn |
| Description | File Screening - cannot load filter driver |
| Event Information | According to Microsoft: Explanation: The file screening minifilter driver is not attached to a volume. While the driver is detached, file screening enforcement and management is not available on the volume. Cause: Possible causes include: 1. The version of the filter metadata 2. does not match any version supported by the driver. 3. The metadata file is corrupt. 4. There was an unexpected error (typically memory pressure). RESOLUTION: The resolution for the first and second causes is to restore the metadata from backup. For the third cause, the recommended solution is to reattach the filter driver using the filter manager command-line tool or to restart the computer. |
| Reference Links | Microsoft product: Windows Operating System Version: 5.2.3790.1830 Event Source: datascrn Event ID: 5 |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.