Author Topic: Event Id 5038  (Read 889 times)

0 Members and 1 Guest are viewing this topic.

Offline Spark

  • Newbie
  • *
  • Posts: 2
Event Id 5038
« on: July 02, 2022, 01:24:51 PM »
A few days ago i started noticing this in event viewer:

Code integrity determined that the image hash of a file is not valid. The file could be corrupt due to unauthorized modification or the invalid hash could indicate a potential disk device error.

For temporary files like:

\Device\HarddiskVolume6\Windows\Temp\asw4aa4dbbcdc18c148.tmp
\Device\HarddiskVolume6\Windows\Temp\asw223886938c72c815.tmp
\Device\HarddiskVolume6\Windows\Temp\aswbb0d5ddb96db50a7.tmp

And yesterday for:

\Device\HarddiskVolume6\Windows\System32\drivers\aswVmm.sys

They always come in pairs and the usual routine of repairing avast/dism/sfc did not solve the issue.
Also the system and avast are both updated to the latest version.

I would like to know if these are indeed avast files (it seems to be the case but i'm not 100% sure) and if they are harmless or they might indicate an infection or something (i do run frequent malwarebytes scans an they have found nothing but you never know).

Thank you

Offline Spark

  • Newbie
  • *
  • Posts: 2
Re: Event Id 5038
« Reply #1 on: July 09, 2022, 09:53:05 AM »
This event still occurs. Does anyone know what might be causing this?