Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: Desktop "resets" event 5038. Audit Failer

04 Jul 2010   #1

Desktop "resets" event 5038. Audit Failer

Hey guys I recently re installed win 7 home premium and a few days later when logging it said preparing desktop, as if it was the first time Ih ad logged in. When it finally logged in my desktop seemed to have been reset, it only had recycle bin, itunes (which had to reinstall after clicking it) firefox and thunderbird and I had to go to program files to find the programs I had and pictures etc weren't in the my pictures folder.

Put everything back in place and now it's happened again right now but this time noticed the bubble on bottom of screen and to check event log. The event viewer says Event 5038 Microsoft Security Auditing and also says Code integrity determined that the image hash of a file is not valid. The file could be corrupt due to unaurthorized modification or the invalid hash could indicate a potential disk device error.
There is also this I cope and pasted below

+ System - Provider [ Name] Microsoft-Windows-Security-Auditing [ Guid] {54849625-5478-4994-A5BA-3E3B0328C30D}
EventID 5038 Version 0 Level 0 Task 12290 Opcode 0 Keywords 0x8010000000000000 - TimeCreated [ SystemTime] 2010-07-01T11:31:06.966796800Z
EventRecordID 16663 Correlation - Execution [ ProcessID] 4 [ ThreadID] 44
Channel Security Computer Anthony-PC Security
- EventData

param1 \Device\HarddiskVolume1\Users\Anthony\AppData\Local\Temp\c5e7d209-6e78-47f5-9064-3ded4061a6db

Thanks guys :)

My System SpecsSystem Spec
04 Jul 2010   #2
Microsoft MVP

Windows 7 Ultimate 32bit SP1

Download TFC by Old Timer TFC - Temp File Cleaner by OldTimer -> Anti-malware Tools -> Downloads and save it to your desktop.

Save any unsaved work. TFC will close ALL open programs including your browser!

Using Vista/Windows 7 right-click on the file and choose Run As Administrator.

Click the Start button to begin the cleaning process and let it run uninterrupted to completion.

Important! If TFC prompts you to reboot, please do so immediately. If not prompted, manually reboot the machine anyway to ensure a complete clean.

Tell us if this helps
My System SpecsSystem Spec
04 Jul 2010   #3
Microsoft MVP


Where did you get Windows 7?
My System SpecsSystem Spec

04 Jul 2010   #4


Got it when the full version was released in Australia a proper copy from a proper shop so it's not illegal haha and this has only happene din the past week.
Thanks Jacee I'll give that a go in a few mins and let you know what happens
My System SpecsSystem Spec
04 Jul 2010   #5


Ok when I made the post above I wa son my laptop but back on desktop (the one which had the error) and the desktop screen was back to normal this time everything that was there previously was back but I ran that exe file anyway and so far so good.
Thanks for the help :) if it happens again will let you know
My System SpecsSystem Spec

 Desktop "resets" event 5038. Audit Failer

Thread Tools

Similar help and support threads
Thread Forum
What's the best way to backup an "audit mode" install?
Hi, I have a Windows 7 Pro installation that I set up following Kari's excellent guide a few years ago (when I built this SSD + HDD system). It is an "audit mode" or sysprep type install with the C/system drive on SSD and user folders etc on D. I have backed up using the vanilla W7 full...
Backup and Restore
Looping "Starting Services" After OOBE from Audit Mode
When I turn on the computer... ...I get the Dell startup screen... ...then the Starting Services screen...
Installation & Setup
"easy transfer" resets folder modified date
I just installed Windows 7 (Pro 64bit) on my desktop and ran W.E.T. to transfer my files from my Vista installation. The files have maintained their modified date/timestamp, but the folders' modified-date have all been reset to the current date (actually not quite all of them - empty folders have...
General Discussion
Freezing "Audit events have been dropped by the transport. 0"
I got this computer a month ago, and it froze once or twice a week. But now that it's frozen completely the last few days, I'm here asking for help. It always freezes when using an application, (games, internet explorer, windows media player.) It freezes completely, no mouse movement. It...
BSOD Help and Support
Task Mgr-"Show processes from all users" resets itself
In XP if you check the box "show processes from all users" it's then static unless you uncheck it. It doesn't reset itself if you close Task Mgr and /or reboot. Under Build 7100 it does reset itself. If I close TM it resets. Same if I reboot while TM is open or closed. Is there a way to...

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 13:53.
Twitter Facebook Google+