[SOLVED] icrav03.rat corruption

R

RudyzP

Member
Joined
Nov 9, 2016
Posts
23
Hello

After security rollup instal sfc /scannow found corruption which couldn't be fixed.

""""""2016-11-09 03:37:02, Info CSI 00000838 [SR] Cannot repair member file [l:22{11}]"icrav03.rat" of Microsoft-Windows-IE-Ratings, Version = 11.0.9600.18525, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, , Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2016-11-09 03:37:02, Info CSI 00000839 [SR] This component was referenced by [l:164{82}]"Package_698_for_KB3197874~31bf3856ad364e35~amd64~~6.3.1.5.3197874-1069_neutral_GDR"''''''''''''




i have uninstalled KB3197874

now all scans with sfc are ok but SFCfix tells me that my problems are not over


SFCFix version 3.0.0.0 by niemiro.
Start time: 2016-11-10 15:32:30.684
Microsoft Windows 8.1 Update 3 - amd64
Not using a script file.




AutoAnalysis::
CORRUPT: C:\Windows\winsxs\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_cb3bebd13fc5827b\icrav03.rat
CORRUPT: C:\Windows\winsxs\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_6f1d504d87681145\icrav03.rat


SUMMARY: Some corruptions could not be fixed automatically. Seek advice from helper or sysnative.com.
CBS & SFC total detected corruption count: 2
CBS & SFC total unimportant corruption count: 0
CBS & SFC total fixed corruption count: 0
SURT total detected corruption count: 0
SURT total unimportant corruption count: 0
SURT total fixed corruption count: 0
AutoAnalysis:: directive completed successfully.




Successfully processed all directives.
SFCFix version 3.0.0.0 by niemiro has completed.
Currently storing 0 datablocks.
Finish time: 2016-11-10 15:46:07.493
----------------------EOF-----------------------


I'm not using Microsoft Explorer much but it seems that i might have problems with future updates.

Thanks
 
I have mixed up a fix with both rat files taken from another machine.


SFCFix version 3.0.0.0 by niemiro.
Start time: 2016-11-14 21:28:47.058
Microsoft Windows 8.1 Update 3 - amd64
Using .zip script file at d:\Users\Pawel\Desktop\SFCFix.zip [0]




PowerCopy::
Successfully took permissions for file or folder C:\Windows\WinSxS\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_6f1d504d87681145\icrav03.rat
Successfully took permissions for file or folder C:\Windows\WinSxS\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_6f1d504d87681145\msrating.dll
Successfully took permissions for file or folder C:\Windows\WinSxS\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_cb3bebd13fc5827b\icrav03.rat
Successfully took permissions for file or folder C:\Windows\WinSxS\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_cb3bebd13fc5827b\msrating.dll

Successfully copied file d:\Users\Pawel\AppData\Local\niemiro\Archive\WinSxS\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_6f1d504d87681145\icrav03.rat to C:\Windows\WinSxS\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_6f1d504d87681145\icrav03.rat.
Successfully copied file d:\Users\Pawel\AppData\Local\niemiro\Archive\WinSxS\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_6f1d504d87681145\msrating.dll to C:\Windows\WinSxS\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_6f1d504d87681145\msrating.dll.
Successfully copied file d:\Users\Pawel\AppData\Local\niemiro\Archive\WinSxS\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_cb3bebd13fc5827b\icrav03.rat to C:\Windows\WinSxS\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_cb3bebd13fc5827b\icrav03.rat.
Successfully copied file d:\Users\Pawel\AppData\Local\niemiro\Archive\WinSxS\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_cb3bebd13fc5827b\msrating.dll to C:\Windows\WinSxS\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_cb3bebd13fc5827b\msrating.dll.

Successfully restored ownership for C:\Windows\WinSxS\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_6f1d504d87681145\icrav03.rat
Successfully restored permissions on C:\Windows\WinSxS\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_6f1d504d87681145\icrav03.rat
Successfully restored ownership for C:\Windows\WinSxS\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_6f1d504d87681145\msrating.dll
Successfully restored permissions on C:\Windows\WinSxS\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_6f1d504d87681145\msrating.dll
Successfully restored ownership for C:\Windows\WinSxS\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_cb3bebd13fc5827b\icrav03.rat
Successfully restored permissions on C:\Windows\WinSxS\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_cb3bebd13fc5827b\icrav03.rat
Successfully restored ownership for C:\Windows\WinSxS\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_cb3bebd13fc5827b\msrating.dll
Successfully restored permissions on C:\Windows\WinSxS\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_cb3bebd13fc5827b\msrating.dll
PowerCopy:: directive completed successfully.




Successfully processed all directives.
SFCFix version 3.0.0.0 by niemiro has completed.
Currently storing 4 datablocks.
Finish time: 2016-11-14 21:28:47.245
Script hash: Jpntn+i4zGeI8WmO+NzhuBnKXLaki0f2DSXJ98uL0Lc=
----------------------EOF-----------------------
 
thanks for asking
unfortunately i wasn't able to fix it on my own.
so please give it a try.
 
OK, please start with the following so I can get current logs.

SFC Scan
1. Right-click on the Start
w8start.png
button and select Command Prompt (Admin)
2. When command prompt opens, Copy (Ctrl+C) and Paste (Right-click > Paste) the following command into it, then press Enter
 sfc /scannow

3. Once it finishes, copy and paste the following into the command-prompt window and press Enter.
copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"

4. Once this has completed please go to your Desktop and you will find CBS.txt => Right-click on this file and choose Send To...Compressed (zipped folder). Please upload this zipped file CBS.zip to this thread

Please Note:: if the file is too big to upload to your next post please upload via a service such as Dropbox or One Drive or SendSpace and just provide the link.
 
Thanks. Please do the following.

Step#1 - SFCFix Script
Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.
  1. Download SFCFix.exe (by niemiro) and save this to your Desktop. If you still have this on your desktop from downloading previously, you don't need to re-download.
  2. Download the file below, SFCScript.txt, and save this to your Desktop.
  3. Save any open documents and close all open windows.
  4. On your Desktop, you should see two files: SFCFix.exe and SFCScript.txt.
  5. Drag the file SFCScript.txt onto the file SFCFix.exe and release it.
  6. SFCFix will now process the script.
  7. Upon completion, a file should be created on your Desktop: SFCFix.txt.
  8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please
 

Attachments

Scan results:
SFCFix version 3.0.0.0 by niemiro.
Start time: 2016-12-03 22:48:19.234
Microsoft Windows 8.1 Update 3 - amd64
Using .txt script file at d:\Users\Pawel\Desktop\SFCScript.txt [0]




FileScan::
[0: 1] C:\SFCFix\Backups\C\Windows\WinSxS\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_6f1d504d87681145\icrav03.rat
File is untraceable.
Found: M8O6lD2NJzQXLcl7IM5vCIGD6IK5/4HYmWI0aSKRGVY=
Version number not available.
Trace not available.



[1: 1] C:\SFCFix\Backups\C\Windows\WinSxS\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_cb3bebd13fc5827b\icrav03.rat
File is untraceable.
Found: M8O6lD2NJzQXLcl7IM5vCIGD6IK5/4HYmWI0aSKRGVY=
Version number not available.
Trace not available.



[2: 1] C:\Windows\WinSxS\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18450_none_6f2b92ff875cc134\icrav03.rat
File is untraceable.
Found: F7T+Ha9wQxAj3l/HInshW3eU5tpdOBYg5epGvozFtb8=
Version number not available.
Trace not available.



[3: 1] C:\Windows\SysWOW64\icrav03.rat
File is untraceable.
Found: zW+HxvMZQlzIGdOo+HzxsveroP6yl5lWK3CxFjLo0W4=
Version number not available.
Trace not available.



[4: 1] C:\Windows\System32\icrav03.rat
File is untraceable.
Found: zW+HxvMZQlzIGdOo+HzxsveroP6yl5lWK3CxFjLo0W4=
Version number not available.
Trace not available.



[5: 1] C:\Windows\WinSxS\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18450_none_cb4a2e833fba326a\icrav03.rat
File is untraceable.
Found: F7T+Ha9wQxAj3l/HInshW3eU5tpdOBYg5epGvozFtb8=
Version number not available.
Trace not available.



[6: 1] C:\Windows\WinSxS\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18500_none_cb3a5d253fc6cfa8\icrav03.rat
File is untraceable.
Found: Ysg7YHa0ql73oRGIsZONhBr2FGy7IoUQQb+lTzBgnas=
Version number not available.
Trace not available.



[7: 1] C:\Windows\WinSxS\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18500_none_6f1bc1a187695e72\icrav03.rat
File is untraceable.
Found: Ysg7YHa0ql73oRGIsZONhBr2FGy7IoUQQb+lTzBgnas=
Version number not available.
Trace not available.



[8: 1] C:\Windows\WinSxS\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_cb3bebd13fc5827b\icrav03.rat
File is untraceable.
Found: zW+HxvMZQlzIGdOo+HzxsveroP6yl5lWK3CxFjLo0W4=
Version number not available.
Trace not available.



[9: 1] C:\Windows\WinSxS\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_6f1d504d87681145\icrav03.rat
File is untraceable.
Found: zW+HxvMZQlzIGdOo+HzxsveroP6yl5lWK3CxFjLo0W4=
Version number not available.
Trace not available.



[10: 1] C:\Windows\SoftwareDistribution\Download\fb6d682ee3f4150209243a6acb6d8e46\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18450_none_6f2b92ff875cc134\icrav03.rat
File is untraceable.
Found: zW+HxvMZQlzIGdOo+HzxsveroP6yl5lWK3CxFjLo0W4=
Version number not available.
Trace not available.



[11: 1] C:\Windows\SoftwareDistribution\Download\fb6d682ee3f4150209243a6acb6d8e46\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18450_none_cb4a2e833fba326a\icrav03.rat
File is untraceable.
Found: zW+HxvMZQlzIGdOo+HzxsveroP6yl5lWK3CxFjLo0W4=
Version number not available.
Trace not available.
FileScan:: directive completed successfully.




Successfully processed all directives.
SFCFix version 3.0.0.0 by niemiro has completed.
Currently storing 4 datablocks.
Finish time: 2016-12-03 22:48:21.156
Script hash: 6OgjBied/z7Cua8YmhJHF2KYcToAVG6kFRwpp915cjc=
----------------------EOF-----------------------
 
Please start with the following.

Step#1 - SFCFix Script
Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

  1. Download SFCFix.exe (by niemiro) and save this to your Desktop. If you still have this on your desktop from downloading previously, you don't need to re-download.
  2. Download the file below, SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
  3. Save any open documents and close all open windows.
  4. On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
  5. Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
  6. SFCFix will now process the script.
  7. Upon completion, a file should be created on your Desktop: SFCFix.txt.
  8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please
 

Attachments

ok. Done.
SFCFix version 3.0.0.0 by niemiro.
Start time: 2016-12-04 23:52:22.629
Microsoft Windows 8.1 Update 3 - amd64
Using .zip script file at d:\Users\Pawel\Desktop\SFCFix.zip [0]




PowerCopy::
Successfully took permissions for file or folder C:\Windows\Winsxs\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_6f1d504d87681145\icrav03.rat

WARNING: File C:\Windows\Winsxs\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_6f1d504d87681145\icrav03.rat was not backed up as that would replace the current backup.
Successfully copied file d:\Users\Pawel\AppData\Local\niemiro\Archive\Winsxs\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_6f1d504d87681145\icrav03.rat to C:\Windows\Winsxs\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_6f1d504d87681145\icrav03.rat.

Successfully restored ownership for C:\Windows\Winsxs\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_6f1d504d87681145\icrav03.rat
Successfully restored permissions on C:\Windows\Winsxs\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_6f1d504d87681145\icrav03.rat
PowerCopy:: directive completed successfully.




Successfully processed all directives.
SFCFix version 3.0.0.0 by niemiro has completed.
Currently storing 5 datablocks.
Finish time: 2016-12-04 23:52:22.785
Script hash: oBAnsPWAlXw8P29AeCll4wp03K134XXsSPtj1L3Ek9g=
----------------------EOF-----------------------
 
Please do the following.

SFC Scan
1. Right-click on the Start
w8start.png
button and select Command Prompt (Admin)
2. When command prompt opens, Copy (Ctrl+C) and Paste (Right-click > Paste) the following command into it, then press Enter
 sfc /scannow

3. Once it finishes, copy and paste the following into the command-prompt window and press Enter.
copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"

4. Once this has completed please go to your Desktop and you will find CBS.txt => Right-click on this file and choose Send To...Compressed (zipped folder). Please upload this zipped file CBS.zip to this thread

Please Note:: if the file is too big to upload to your next post please upload via a service such as Dropbox or One Drive or SendSpace and just provide the link.
 
I need your COMPONENTS hive to verify a fix.

Retrieve Components Hive
 1. Navigate to C:\Windows\System32\Config and locate the COMPONENTS file.
2. Please copy this file to your desktop.
Note: If you receive an error that this file is in-use, simply reboot your computer and try again.
3. Right-click on this file on your desktop and select Send To...Compressed (zipped) folder. This will create a file named COMPONENTS.ZIP on your desktop.
4. The file will likely be too large to upload here so please upload to SendSpace and just provide the link here.
 
Thanks. Please do the following.

Step#1 - SFCFix Script
Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.
  1. Download SFCFix.exe (by niemiro) and save this to your Desktop. If you still have this on your desktop from downloading previously, you don't need to re-download.
  2. Download the file below, SFCScript.txt, and save this to your Desktop.
  3. Save any open documents and close all open windows.
  4. On your Desktop, you should see two files: SFCFix.exe and SFCScript.txt.
  5. Drag the file SFCScript.txt onto the file SFCFix.exe and release it.
  6. SFCFix will now process the script.
  7. Upon completion, a file should be created on your Desktop: SFCFix.txt.
  8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please
 

Attachments

You must log in or register to reply here.

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top