Thread Info
  • State Not Answered
  • +3 person also asked this people also asked this
  • Replies 6 replies
  • Subscribers 10 subscribers
  • Views 6260 views
  • Users 0 members are here
Options
Suggested

Sophos generating a lot of 5038 Errors in the Security Log

Corey Arndt

I have noticed a lot of my computers are showing dozens or maybe hundreds of 5038 errors daily for Code Integrity for several Sophos files.  How can I fix this or prevent this from appearing?  This is filling up my Security logs so they are 'full'.

Code integrity determined that the image hash of a file is not valid. The file could be corrupt due to unauthorized modification or the invalid hash could indicate a potential disk device error.
File Name: \Device\HarddiskVolume4\Windows\System32\drivers\SophosED.sys

Code integrity determined that the image hash of a file is not valid. The file could be corrupt due to unauthorized modification or the invalid hash could indicate a potential disk device error.
File Name: \Device\HarddiskVolume4\Program Files\Sophos\Sophos AMSI Protection\SophosAmsiProvider.dll

Thank you

Parents Reply
  • 0 in reply to Dr Sophos

    Seeing this issue today, over 2 years later. Per support.sophos.com/.../KBA-000007855, signing level is at 8, Microsoft signed.  I'm thinking it needs to be signing level 12, Windows signed.  Still, Sophos should be able to take care of that.

    Really don't like junk event logs clogging up a Security event log when I'm looking for legitimate events.  Makes it harder for us.

    Sophos Firewall Engineer 16.0-20.0
    Sophos Firewall Architect 18.0-20.0
    Sophos Firewall Technician 18.0-20.0
    Sophos Central & Endpoint Architect 3.0-4.0
    Sophos Central Email v2.0
    Sophos Mobile v9.6
    Sophos ZTNA 1.0, 2.0
    Synchronized Security Accredited
    Sophos Gold Partner

Children
No Data
Unfiltered HTML