[SOLVED] sfcfix.exe

mlee

Member
Joined
Mar 23, 2022
Posts
20
I am running Win 8.1 with all the updates.
I have been getting BSOD off and on for a few weeks.
I tried to create a recovery USB but Windows said, "Recovery Environment not found".
I then ran sfc /scannow and it created a log file:

CBS.log

Not sure if is attached??
 

Attachments

Rich (BB code):
2022-03-23 00:54:11, Info                  CSI    000009bf Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.20296_none_b4959c6b594e5f11\icrav03.rat do not match actual file [l:22{11}]"icrav03.rat" :
  Found: {l:32 b:WMFYyzW+xdYdq9V8Ty1mZXC/L/HvT6wZT3fyG0XQzXM=} Expected: {l:32 b:zW+HxvMZQlzIGdOo+HzxsveroP6yl5lWK3CxFjLo0W4=}
2022-03-23 00:54:11, Info                  CSI    000009c0 [SR] Cannot repair member file [l:22{11}]"icrav03.rat" of Microsoft-Windows-IE-Ratings, Version = 11.0.9600.20296, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2022-03-23 00:54:11, Info                  CSI    000009c3 [SR] This component was referenced by [l:158{79}]"Package_785_for_KB5011564~31bf3856ad364e35~amd64~~6.3.1.14.5011564-1255_neutral"

SFCFix Script
Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.
  1. Download SFCFix.exe (by niemiro) and save this to your Desktop.
  2. Download the file below, SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
  3. Save any open documents and close all open windows.
  4. On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
  5. Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
  6. SFCFix will now process the script.
  7. Upon completion, a file should be created on your Desktop: SFCFix.txt.
  8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please - put [CODE][/CODE] tags around the log to break up the text.
 

Attachments

sfcfix.txt:

SFCFix version 3.0.2.1 by niemiro.
Start time: 2022-03-23 20:01:01.087
Microsoft Windows 8.1 Update 3 - amd64
Using .zip script file at C:\Users\Michael\Desktop\SFCFix.zip [0]




PowerCopy::
Successfully took permissions for file or folder C:\WINDOWS\WinSxS\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.20296_none_b4959c6b594e5f11\icrav03.rat

Successfully copied file C:\Users\Michael\AppData\Local\niemiro\Archive\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.20296_none_b4959c6b594e5f11\icrav03.rat to C:\WINDOWS\WinSxS\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.20296_none_b4959c6b594e5f11\icrav03.rat.

Successfully restored ownership for C:\WINDOWS\WinSxS\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.20296_none_b4959c6b594e5f11\icrav03.rat
Successfully restored permissions on C:\WINDOWS\WinSxS\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.20296_none_b4959c6b594e5f11\icrav03.rat
PowerCopy:: directive completed successfully.




Successfully processed all directives.
SFCFix version 3.0.2.1 by niemiro has completed.
Currently storing 1 datablocks.
Finish time: 2022-03-23 20:01:01.435
Script hash: Q3uWH1cjiHhv25QEcpcNDH7fMypRzBDzRVJPa3Qk8aM=
----------------------EOF-----------------------
 
Thanks, could you please run sfc /scannow again? If it fails, then please provide the latest CBS log.
 
Rich (BB code):
2022-03-23 19:37:57, Info                  CSI    000009bd [SR] Cannot repair member file [l:22{11}]"icrav03.rat" of Microsoft-Windows-IE-Ratings, Version = 11.0.9600.20296, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2022-03-23 19:37:57, Info                  CSI    000009be Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.20296_none_b4959c6b594e5f11\icrav03.rat do not match actual file [l:22{11}]"icrav03.rat" :
  Found: {l:32 b:WMFYyzW+xdYdq9V8Ty1mZXC/L/HvT6wZT3fyG0XQzXM=} Expected: {l:32 b:zW+HxvMZQlzIGdOo+HzxsveroP6yl5lWK3CxFjLo0W4=}

Interestingly, it appears that the file wasn't repaired despite the file I provided you with having the corresponding hash. Could you please provide your COMPONENTS hive using the following instructions:

Retrieve Components Hive
1. Navigate to C:\Windows\System32\Config and locate the COMPONENTS file.
2. Please copy this file to your desktop.
Note: If you receive an error that this file is in-use, simply reboot your computer and try again.
3. Right-click on this file on your desktop and select Send To...Compressed (zipped) folder. This will create a file named COMPONENTS.ZIP on your desktop.
4. The file will likely be too large to upload here so please upload to a file sharing service. Examples of services to upload to are Dropbox or OneDrive or SendSpace and then just provide the link in your reply.
 
Rich (BB code):
2022-03-23 19:37:57, Info                  CSI    000009bd [SR] Cannot repair member file [l:22{11}]"icrav03.rat" of Microsoft-Windows-IE-Ratings, Version = 11.0.9600.20296, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2022-03-23 19:37:57, Info                  CSI    000009be Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.20296_none_b4959c6b594e5f11\icrav03.rat do not match actual file [l:22{11}]"icrav03.rat" :
  Found: {l:32 b:WMFYyzW+xdYdq9V8Ty1mZXC/L/HvT6wZT3fyG0XQzXM=} Expected: {l:32 b:zW+HxvMZQlzIGdOo+HzxsveroP6yl5lWK3CxFjLo0W4=}

Interestingly, it appears that the file wasn't repaired despite the file I provided you with having the corresponding hash. Could you please provide your COMPONENTS hive using the following instructions:

Retrieve Components Hive
1. Navigate to C:\Windows\System32\Config and locate the COMPONENTS file.
2. Please copy this file to your desktop.
Note: If you receive an error that this file is in-use, simply reboot your computer and try again.
3. Right-click on this file on your desktop and select Send To...Compressed (zipped) folder. This will create a file named COMPONENTS.ZIP on your desktop.
4. The file will likely be too large to upload here so please upload to a file sharing service. Examples of services to upload to are Dropbox or OneDrive or SendSpace and then just provide the link in your reply.

I sent you a PM a few days ago. Did you see it?
No BSOD since last Monday (7 days).
 
@mlee please ensure that you post the CBS log to your actual thread rather than PM. Your CBS log appears to be clear now so I'm going to mark this thread as solved for you.
 

Attachments

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top