Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

an audit failure.....can anyone tell me how to fix it ?


  • Please log in to reply
6 replies to this topic

#1 browniebrownie141

browniebrownie141

  • Members
  • 80 posts
  • OFFLINE
  •  
  • Local time:01:59 PM

Posted 13 August 2014 - 04:26 AM

Here is what i see, from "event log" : Audit failure event 5038

 

\device\harddiskvolume2\windows\system32\drivers\mwac.sys

 

Description:

Code integrity determined that the image hash of a file is not valid. The file could be corrupt due to unauthorized modification or the invalid hash could indicate a potential disk device error.

 

Here are the spec of my laptop:

Sony/ Vista Ultimate SP2/ Ram-4GB/ solid state HD-300GB/ Intel 2.6GHz/ 

 

Don't think it is virus-now. used Malwarebytes and SuperAntispyware full scan/ at SAFE-mode w/ networking, and rootkit kill, turns out ok. 

 

Anyone please, tell me why the Audit Failure, AND how to fix it ??

 

Million thanks 

 

 



BC AdBot (Login to Remove)

 


#2 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,675 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:02:59 PM

Posted 14 August 2014 - 11:51 AM

Please download and install Speccy to provide us with information about your computer.  When  FileHippo opens, click on Download latest version in the upper right pane.
 
When Speccy opens you will see a screen similar to the one below.
 
speccy9_zps2d9cdedc.png
 
Click on File which is outlined in red in the screen above, and then click on Publish Snapshot.
 
The following screen will appear, click on Yes.
 
speccy7_zpsfa02105f.png
 
The following screen will appear, click on Copy to Clipboard.
 
speccy3_zps1791b093.png
 
In your next post right click inside the Reply to Topic box, then click on Paste.  This will load a link to the Speccy log.
 
 

Please download MiniToolBox, save it to your desktop and run it.
 
Checkmark the following checkboxes:
 
• List last 10 Event Viewer log
• List Installed Programs
• List Users, Partitions and Memory size.
• List Minidump Files
 
Click on Go to start the scan.  Once it is finished highlight the text, copy it and paste it in your next post.
 

Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#3 browniebrownie141

browniebrownie141
  • Topic Starter

  • Members
  • 80 posts
  • OFFLINE
  •  
  • Local time:01:59 PM

Posted 19 August 2014 - 02:45 AM

@dc3:

 

thanks for the reply,...i guess i did not mentioned my computer is 32 bits based, other than that, pretty much straight forward. 

 

as for the softwares you asked me to download, again, pretty much coming back what I told you and others. so i don't think i would want to go thru that & telling you same stuff, if that's ok with you & other geneltmen/ladies here. 

 

thanks



#4 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,675 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:02:59 PM

Posted 19 August 2014 - 10:26 AM

Being a 32-bit operating system does not matter in regards to the MiniToolBox or Speccy.

 

You have posted only one event, it's not realistic to assume that a diagnosis can be made with this one piece of information.  You need to provide the information requested in order to get help with this.  If you are not willing to do the requested scans and Speccy I will not be able to help you.

 

I would also suggest that you run a sfc /scannow.

 

 
The sfc /scannow command scans all protected system files and replaces corrupted and incorrect versions with correct Microsoft versions.
 
Click on the Start button, then click on Run type cmd in the text box.  
 
You will see the following message This task will be created with administrative privileges, click on Ok, then press Enter.
 
If you are prompted for an administrator password or for a confirmation, enter the password, or click Allow.
 
A page similar to the one below will open.
 
commandprompt_zps212bc71a.png
 
Type in sfc /scannow and then press Enter to start the scan.  Please notice the space between sfc and the /scannow.
 
If the scan finds no integrity  problems in the first portion of the scan it should stop, to be sure that the scan has stopped wait five minutes, then type in exit and press Enter to stop the scan.
 
When the scan is finished please post the log of this scan.
 
To find sfc /scannow log, type cmd in the Search programs and files box, 
 
cmd will appear above the search box under Apps., right click on it and choose Run as administrator, this will open the Elevated Command Prompt.  This will look simlare to the image below.
 
elevatedcommandpromptw7_zpseba8c499.png
 
copy and paste the following in the Search programs and files box, then press Enter.  
 
findstr /c:"[SR]" %windir%\logs\cbs\cbs.log >%userprofile%\Desktop\sfcdetails.txt
 
This will place a new icon on the desktop titled sfcdetails.  Click on this to open the log, copy it and paste it in your topic. 

Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#5 browniebrownie141

browniebrownie141
  • Topic Starter

  • Members
  • 80 posts
  • OFFLINE
  •  
  • Local time:01:59 PM

Posted 19 August 2014 - 07:39 PM

i did the scan disk AND memory scan both, a while ago on my own, took more than 3 & half hours. are ok. 

 

i copied & pasted the above command, when I clicked to open, it was a pop-up in DOS screen  but quickly disappear. 

 

so i right-clicked my mouse and "open file location", it is a long long list of "more than hundreds of stuff", under the HEADING: Computer/Local Disk C:/Windows/system32,.....so i am not sure what you are looking for....

 

meanwhile, i got a image from event log, see if this is ok? Thanks 

 

IMG_20140819_1731431.jpg



#6 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,675 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:02:59 PM

Posted 21 August 2014 - 07:56 AM

From post #4

 

 

 

This will place a new icon on the desktop titled sfcdetails.  Click on this to open the log, copy it and paste it in your topic. 

Edited by dc3, 21 August 2014 - 07:57 AM.

Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#7 browniebrownie141

browniebrownie141
  • Topic Starter

  • Members
  • 80 posts
  • OFFLINE
  •  
  • Local time:01:59 PM

Posted 21 August 2014 - 06:31 PM

Dear dc3:

 

I copied & pasted the above command, when I clicked to open, it was a pop-up in DOS screen  but quickly disappear. I tried numerous times but still could'nt. This is why I tried the above way,....

 

Thanks ! 






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users