Welcome to Soft32 Forums!
FAQFAQ    SearchSearch      ProfileProfile    Private MessagesPrivate Messages   Log inLog in

Event ID: 5032 or 5038

  
   Soft32 Home -> Win4 Arch -> Security RSS
Next:  Alternative to Windows Firewall  
Author Message
officermartinez

External


Since: Apr 24, 2007
Posts: 6



(Msg. 1) Posted: Tue Apr 24, 2007 8:26 am
Post subject: Event ID: 5032 or 5038
Archived from groups: microsoft>public>windows>vista>security (more info?)
I am using Windows Vista Ultimate x64 and the setup is pretty stable.
However, randomly, my computer will reboot for no appearent reason. Upon
Vista starting back up, I usually go to my Event Viewer. EVERY SINGLE
INSTANCE, after the random reboot, there will be an error posted. It is
Event ID: 5032 or Event ID: 5038 (or both). I have googled my heart out
trying to figure this one out. I have been on numerous boards and it seems
no one can pinpoint the problem. Here is a list of my setup:

Computer: Custom Built
Processor: Intel QX6700 Quadcore
Memory: Corsair Dominator PC2 8500C5D Ram @ 1066mhz
Motherboard: XFX MB-N680-iLT9 (680i LT)
Power Supply: Enermax Galaxy 1000 watt Gamers Edition
Video Card: (2) nVidia 8800GTS cards running in SLi

The computer is connected via a LAN Cable (not wireless).
My internet service provider is Charter Cable. It is a 10Mbps connection.
My cable modem is a Ambit SpeedStream U10C018.
My router is a Linksys WRT54G v4 (wireless capability)

I have NO antivirus installed at the moment.
No software firewall is installed.
I believe the Linksys has a built in firewall.

All of my Vista updates are current. I have not installed my 3rd party
programs but I have installed a few:
Winrar, TeamSpeak RC2, Everest Ultimate, CPU-Z 1.39, F.E.A.R. Combat,
3dmark06, Limewire Pro 4.12.11.. ALL of these programs are listed as
compatible with Vista x64.


Under Event ID: 5032, this is what the message says:

Windows Firewall was unable to notify the user that it blocked an
application from accepting incoming connections on the network.

Error Code: 2

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Microsoft-Windows-Security-Auditing"
Guid="{54849625-5478-4994-a5ba-3e3b0328c30d}" />
<EventID>5032</EventID>
<Version>0</Version>
<Level>0</Level>
<Task>12292</Task>
<Opcode>0</Opcode>
<Keywords>0x8010000000000000</Keywords>
<TimeCreated SystemTime="2007-04-24T15:21:14.942Z" />
<EventRecordID>3414</EventRecordID>
<Correlation />
<Execution ProcessID="620" ThreadID="976" />
<Channel>Security</Channel>
<Computer>WindowsUser</Computer>
<Security />
</System>
- <EventData>
<Data Name="ErrorCode">2</Data>
</EventData>
</Event>


Under Event ID: 5038, this is what it says:

Code integrity determined that the image hash of a file is not valid. The
file could be corrupt due to unauthorized modification or the invalid hash
could indicate a potential disk device error.

File Name: \Device\HarddiskVolume1\Windows\System32\nvd3dumx.dll

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Microsoft-Windows-Security-Auditing"
Guid="{54849625-5478-4994-a5ba-3e3b0328c30d}" />
<EventID>5038</EventID>
<Version>0</Version>
<Level>0</Level>
<Task>12290</Task>
<Opcode>0</Opcode>
<Keywords>0x8010000000000000</Keywords>
<TimeCreated SystemTime="2007-04-24T03:26:33.113Z" />
<EventRecordID>3384</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="72" />
<Channel>Security</Channel>
<Computer>WindowsUser</Computer>
<Security />
</System>
- <EventData>
<Data
Name="param1">\Device\HarddiskVolume1\Windows\System32\nvd3dumx.dll</Data>
</EventData>
</Event>
Back to top
Login to vote
Jesper

External


Since: Dec 22, 2006
Posts: 483



(Msg. 2) Posted: Tue Apr 24, 2007 9:54 am
Post subject: RE: Event ID: 5032 or 5038 [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
This sounds like an nVidia driver issue. Are you using a built-in driver or
one you downloaded from the nVidia web site? I would try uninstalling the
driver and letting Windows detect it again and see if you can get a better
match.
---
Your question may already be answered in Windows Vista Security:
http://www.amazon.com/gp/product/0470101555?ie=UTF8&tag=protectyourwi-20


"officermartinez" wrote:

> I am using Windows Vista Ultimate x64 and the setup is pretty stable.
> However, randomly, my computer will reboot for no appearent reason. Upon
> Vista starting back up, I usually go to my Event Viewer. EVERY SINGLE
> INSTANCE, after the random reboot, there will be an error posted. It is
> Event ID: 5032 or Event ID: 5038 (or both). I have googled my heart out
> trying to figure this one out. I have been on numerous boards and it seems
> no one can pinpoint the problem. Here is a list of my setup:
>
> Computer: Custom Built
> Processor: Intel QX6700 Quadcore
> Memory: Corsair Dominator PC2 8500C5D Ram @ 1066mhz
> Motherboard: XFX MB-N680-iLT9 (680i LT)
> Power Supply: Enermax Galaxy 1000 watt Gamers Edition
> Video Card: (2) nVidia 8800GTS cards running in SLi
>
> The computer is connected via a LAN Cable (not wireless).
> My internet service provider is Charter Cable. It is a 10Mbps connection.
> My cable modem is a Ambit SpeedStream U10C018.
> My router is a Linksys WRT54G v4 (wireless capability)
>
> I have NO antivirus installed at the moment.
> No software firewall is installed.
> I believe the Linksys has a built in firewall.
>
> All of my Vista updates are current. I have not installed my 3rd party
> programs but I have installed a few:
> Winrar, TeamSpeak RC2, Everest Ultimate, CPU-Z 1.39, F.E.A.R. Combat,
> 3dmark06, Limewire Pro 4.12.11.. ALL of these programs are listed as
> compatible with Vista x64.
>
>
> Under Event ID: 5032, this is what the message says:
>
> Windows Firewall was unable to notify the user that it blocked an
> application from accepting incoming connections on the network.
>
> Error Code: 2
>
> <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
> - <System>
> <Provider Name="Microsoft-Windows-Security-Auditing"
> Guid="{54849625-5478-4994-a5ba-3e3b0328c30d}" />
> <EventID>5032</EventID>
> <Version>0</Version>
> <Level>0</Level>
> <Task>12292</Task>
> <Opcode>0</Opcode>
> <Keywords>0x8010000000000000</Keywords>
> <TimeCreated SystemTime="2007-04-24T15:21:14.942Z" />
> <EventRecordID>3414</EventRecordID>
> <Correlation />
> <Execution ProcessID="620" ThreadID="976" />
> <Channel>Security</Channel>
> <Computer>WindowsUser</Computer>
> <Security />
> </System>
> - <EventData>
> <Data Name="ErrorCode">2</Data>
> </EventData>
> </Event>
>
>
> Under Event ID: 5038, this is what it says:
>
> Code integrity determined that the image hash of a file is not valid. The
> file could be corrupt due to unauthorized modification or the invalid hash
> could indicate a potential disk device error.
>
> File Name: \Device\HarddiskVolume1\Windows\System32\nvd3dumx.dll
>
> <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
> - <System>
> <Provider Name="Microsoft-Windows-Security-Auditing"
> Guid="{54849625-5478-4994-a5ba-3e3b0328c30d}" />
> <EventID>5038</EventID>
> <Version>0</Version>
> <Level>0</Level>
> <Task>12290</Task>
> <Opcode>0</Opcode>
> <Keywords>0x8010000000000000</Keywords>
> <TimeCreated SystemTime="2007-04-24T03:26:33.113Z" />
> <EventRecordID>3384</EventRecordID>
> <Correlation />
> <Execution ProcessID="4" ThreadID="72" />
> <Channel>Security</Channel>
> <Computer>WindowsUser</Computer>
> <Security />
> </System>
> - <EventData>
> <Data
> Name="param1">\Device\HarddiskVolume1\Windows\System32\nvd3dumx.dll</Data>
> </EventData>
> </Event>
>
>
Back to top
Login to vote
officermartinez

External


Since: Apr 24, 2007
Posts: 6



(Msg. 3) Posted: Tue Apr 24, 2007 7:21 pm
Post subject: Re: Event ID: 5032 or 5038 [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
I am leaning more towards a network controller issue. I have the nvidia
nforce networking controller installed. Do you think that could be the
issue? I seriously doubt that my video drivers are the cause of my issues.
Back to top
Login to vote
Jesper

External


Since: Dec 22, 2006
Posts: 483



(Msg. 4) Posted: Tue Apr 24, 2007 7:21 pm
Post subject: Re: Event ID: 5032 or 5038 [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
I'm leaning toward video because nvd3dumx.dll is the GeForce video driver.
Why do you think it is a network controller issue?
---
Your question may already be answered in Windows Vista Security:
http://www.amazon.com/gp/product/0470101555?ie=UTF8&tag=protectyourwi-20


"officermartinez" wrote:

> I am leaning more towards a network controller issue. I have the nvidia
> nforce networking controller installed. Do you think that could be the
> issue? I seriously doubt that my video drivers are the cause of my issues.
>
>
Back to top
Login to vote
officermartinez

External


Since: Apr 24, 2007
Posts: 6



(Msg. 5) Posted: Tue Apr 24, 2007 8:34 pm
Post subject: Re: Event ID: 5032 or 5038 [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
OK.. That sounds pretty logical to me also. But I have tried the default
100.65 drivers.. 101.70 drivers.. and the 158.18 drivers.. The 158's are the
latest release from nVidia.. But this issue occurred with ALL driver
versions. Is there a way I can open the port to let that driver communicate,
so I won't get the random boot?
Back to top
Login to vote
Jesper

External


Since: Dec 22, 2006
Posts: 483



(Msg. 6) Posted: Wed Apr 25, 2007 5:30 am
Post subject: Re: Event ID: 5032 or 5038 [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
Of course you can open the port. You just need to find out what port it
needs. Since it is a driver, you can't open the firewall to the app. Did the
event log tell you which port it was trying to open?

FWIW, I have an nVidia card too in one of my machines, and I have not seen
this behavior. I can't recall which driver version I have though, and I don't
have the SLI cards.

---
Your question may already be answered in Windows Vista Security:
http://www.amazon.com/gp/product/0470101555?ie=UTF8&tag=protectyourwi-20


"officermartinez" wrote:

> OK.. That sounds pretty logical to me also. But I have tried the default
> 100.65 drivers.. 101.70 drivers.. and the 158.18 drivers.. The 158's are the
> latest release from nVidia.. But this issue occurred with ALL driver
> versions. Is there a way I can open the port to let that driver communicate,
> so I won't get the random boot?
>
>
Back to top
Login to vote
officermartinez

External


Since: Apr 24, 2007
Posts: 6



(Msg. 7) Posted: Wed Apr 25, 2007 9:22 am
Post subject: Re: Event ID: 5032 or 5038 [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
The event log doesn't show the port information. Hmmmmm.. I had another
random boot today. I was on www.msn.com when it randomly rebooted. Like
every instance before, I went to the Event Viewer, and saw that I had an
Audit Error again.. 5032 and 5038. Grrrrrrrrrrrr. This is very annoying!
Back to top
Login to vote
Jesper

External


Since: Dec 22, 2006
Posts: 483



(Msg. 8) Posted: Wed Apr 25, 2007 6:04 pm
Post subject: Re: Event ID: 5032 or 5038 [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
Can you look at the firewall log? Go into the Windows Firewall with Advanced
Security admin tool. Click the Windows Firewall Properties and configure the
firewall log. After the problem happens again you can look at the log in the
Monitoring area.


---
Your question may already be answered in Windows Vista Security:
http://www.amazon.com/gp/product/0470101555?ie=UTF8&tag=protectyourwi-20


"officermartinez" wrote:

> The event log doesn't show the port information. Hmmmmm.. I had another
> random boot today. I was on www.msn.com when it randomly rebooted. Like
> every instance before, I went to the Event Viewer, and saw that I had an
> Audit Error again.. 5032 and 5038. Grrrrrrrrrrrr. This is very annoying!
>
>
Back to top
Login to vote
officermartinez

External


Since: Apr 24, 2007
Posts: 6



(Msg. 9) Posted: Sat Apr 28, 2007 2:05 pm
Post subject: Re: Event ID: 5032 or 5038 [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
Still getting the reboots.. Does anyone have a suggestion or solution?
Back to top
Login to vote
officermartinez

External


Since: Apr 24, 2007
Posts: 6



(Msg. 10) Posted: Mon May 07, 2007 9:47 am
Post subject: Re: Event ID: 5032 or 5038 [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
I think I am a little closer to the answer now.. I am in into OVERCLOCKING
my computer. Those who don't know what that is, it refers to the ability to
push your computer above and beyond the stock settings, thus making it
FASTER. The theory behind overclocking is a result of individuals who either
want a faster performing computer or the ability to tweak their computer to
prolong its life, thus reducing the need to upgrade quite as much when a
newer / faster processor comes out. I have an Intel QX6700 quadcore
processor. The default speed on this processor is 2.66ghz. Well, I was
getting this error when I had my system overclocked at 3.6ghz. So, I bumped
it down to 3.4ghz.. Still the same issue. I increased my VCORE (CPU VOLTAGE)
and viola, no more errors. However, the processor ran VERY hot on my high
end water cooling setup. So, long story short, I decreased my overclock to
2.8ghz. At that speed, I was running on the default VCORE. I did, however,
bump up my front side bus (FSB) to 400. To combat the extremely high
temperatures of this quadcore processor, I purchased a Vapochill Lightspeed
Phase Change Unit. The unit needs a few modifications, but I should be able
to run my processor at -30'ish degrees. Yes, NEGATIVE 30's. At that
temperature, many overclockers are able to achieve atleast 4ghz on their
quadcore processors. It's been almost a week since I changed my settings and
I have yet to get that error and any random reboots. If anyone else is into
overclocking, I suggest that you check out www.hardforum.com ..Its a great
place to read and learn about computers and all of the related hardware.

My system consists of:

Intel QX6700 quadcore
XFX 680i LT motherboard
Corsair Dominator RAM PC2-8500C5D (4 gigs)
Enermax Galaxy 1000 watt power supply unit
PNY 8800GTS (soon to have another one for SLi)
Lian Li PC-7A computer case (on its way)
Vapochill Lightspeed (on its way)
$500+ dollar water cooling setup
Chemei 22" LCD Monitor @ 1680 x 1050 resolution
Back to top
Login to vote
Giovanni Lentini

External


Since: Aug 28, 2007
Posts: 1



(Msg. 11) Posted: Mon Aug 27, 2007 7:23 pm
Post subject: Re: Event ID: 5032 or 5038 [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
Both of the error are harmless ...

>Under Event ID: 5032, this is what the message says:
>Windows Firewall was unable to notify the user that it blocked an
>application from accepting incoming connections on the network.

This just means that someone pinged or port scanned you etc etc and
the firewall blocked it... beleive me you do NOT want to be notified
everytime this happens Wink

>Under Event ID: 5038, this is what it says:
>Code integrity determined that the image hash of a file is not valid. The
>file could be corrupt due to unauthorized modification or the invalid hash
>could indicate a potential disk device error.
>File Name: \Device\HarddiskVolume1\Windows\System32\nvd3dumx.dll

This just means that the Nvidia nvd3dumx.dll driver is not properly
signed... it is probably NOT corrupt... many companies to not properly
sign a driver to Microsoft's standard... if you update your video
driver this MIGHT go away... if the new driver is properly signed that
is...

I would look elseware for your problems....
--

Please REMOVE the X in my email address to reply.

Giovanni Lentini
gioX.DeleteThis@rkba.net
Back to top
Login to vote
preiner

External


Since: Nov 14, 2007
Posts: 1



(Msg. 12) Posted: Wed Nov 14, 2007 12:20 am
Post subject: Re: Event ID: 5032 or 5038 [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
I have been running Vista x64 for over a year very reliably, but I
notice in the security event log that logitech set point drivers and
ultramon both have DLLs that are failing the hash check. I have
repeatedly download updates and checked the integrity of the downloads
and everything seems fine. Has anyone else run into this issue? Is it a
bug in Vista or are these just sloppy applications?


--
preiner
Posted via http://www.vistaheads.com
Back to top
Login to vote
James Matthews

External


Since: May 13, 2007
Posts: 66



(Msg. 13) Posted: Tue Nov 20, 2007 1:48 pm
Post subject: Re: Event ID: 5032 or 5038 [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
Please put the event message here also!

--

http://www.goldwatches.com/movado--watches.html
http://www.jewelerslounge.com/
"preiner" <preiner.300z83.TakeThisOut@no-mx.forums.vistaheads.com> wrote in message
news:preiner.300z83@no-mx.forums.vistaheads.com...
>
> I have been running Vista x64 for over a year very reliably, but I
> notice in the security event log that logitech set point drivers and
> ultramon both have DLLs that are failing the hash check. I have
> repeatedly download updates and checked the integrity of the downloads
> and everything seems fine. Has anyone else run into this issue? Is it a
> bug in Vista or are these just sloppy applications?
>
>
> --
> preiner
> Posted via http://www.vistaheads.com
>
Back to top
Login to vote
Display posts from previous:   
Related Topics:
Accessing permissions - Hello everybody You know firefox browser stores my profile settings, plugins, bookmarks ....etc on users -->..

Event Logs/Event Viewer - I have 2 PCs, one is XP Pro and the other is XP Home and noticed that the Event Viewer for the XP Pro machine never..

Can somebody please explain to me what this error in event.. - My computer has been freezing a lot. At first I thought it my cordless Logitech mouse that I just got, so I uninstalled...

Could somebody please explain to me what the following err.. - My computer has been freezing a lot lately. At first I thought it my cordless Logitech mouse that I just got, so I..

WakeUp Event - Hallo, to start a certein routine when Windows XP is startet from hibernate or standby, I need a info how to realize a...

Event Sound not available - When I delete any file , I want a sound to be beep along with the system popup I got the popup but without any sound,....
       Soft32 Home -> Win4 Arch -> Security All times are: Pacific Time (US & Canada) (change)
Page 1 of 1

 
 You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Categories:
 Windows
 Linux
 Mac
 PDA

[ Contact us | Terms of Service/Privacy Policy ]