Event 5038

[SC Tom]

Almost every boot up, I get the following Security event entry:

"Log Name: Security
Source: Microsoft-Windows-Security-Auditing
Date: 6/20/2009 11:29:30 AM
Event ID: 5038
Task Category: System Integrity
Level: Information
Keywords: Audit Failure
User: N/A
Computer: M6850-FX
Description:
Code integrity determined that the image hash of a file is not valid. The
file could be corrupt due to unauthorized modification or the invalid hash
could indicate a potential disk device error.
File Name: \Device\HarddiskVolume1\Windows\System32\drivers\vsdatant.sys"

It's not always for the same file as this one (which is part of Zone Alarm
Security Suite), and it's usually only one file per boot up. Of course,
clicking on the link to on-line help brings up "No help for this event."
I have run ZA virus scan, MalwareBytes, and Super Antispyware (not all at
the same time), and nothing was found. I have run chkdsk and nothing was
found wrong. It doesn't seem to affect the operation of my notebook; just
curious as to what cause the error.

Vista Home Premium SP2
Gateway M6850-FX
4GB RAM
320GB HDD, 265GB free

Any advice will be appreciated.
SC Tom

 

[Ǝиçεl]

So you can just ignore the event. If you want to filter the log, you can
follow the steps below:

1. Go to event viewer and open the security event log.
2. Right click on Security in the left window pane of the event viewer and
click on "Filter Current Log".
3. Now enter "-5038" (with a minus in front) in the field that is marked
with "<All Event IDs>" and press OK to exclude all 5038 Events.
4. Right click Security once more and choose "Save Filter to Custom View".
5. Name the Custom View and enter a short description. Click OK. This saves
the filtered view under "Custom Views". You can choose or create a new
location to save this view if you like.
6. Now you can see the newly created filtered view of the Security Log under
"Custom Views".

Source :
<http://www.eventid.net/display.asp?...e=Microsoft-Windows-Security-Auditing&phase=1>


Good luck
-=-
http://groups.google.com/groups/sea...&as_maxm=6&as_maxy=2009&as_drrb=b&sitesearch=

 

[SC Tom]

Yeah, I've been ignoring it. I didn't find that link when I searched- the
operative line was that the file isn't digitally signed. I kinda had a
feeling that was partly it since the signature on this file expired in
March.

Thanks for your reply!
SC Tom

 

[Ǝиçεl]

No mentiont it, any time
-=-

Yeah, I've been ignoring it. I didn't find that link when I searched- the
operative line was that the file isn't digitally signed. I kinda had a
feeling that was partly it since the signature on this file expired in
March.

Thanks for your reply!
SC Tom