Page 1 of 2 12 Last
  1. #1

    icrav03.rat corruption

    Hello

    After security rollup instal sfc /scannow found corruption which couldn't be fixed.

    """"""2016-11-09 03:37:02, Info CSI 00000838 [SR] Cannot repair member file [l:22{11}]"icrav03.rat" of Microsoft-Windows-IE-Ratings, Version = 11.0.9600.18525, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, , Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
    2016-11-09 03:37:02, Info CSI 00000839 [SR] This component was referenced by [l:164{82}]"Package_698_for_KB3197874~31bf3856ad364e35~amd64~~6.3.1.5.3197874-1069_neutral_GDR"''''''''''''




    i have uninstalled KB3197874

    now all scans with sfc are ok but SFCfix tells me that my problems are not over


    SFCFix version 3.0.0.0 by niemiro.
    Start time: 2016-11-10 15:32:30.684
    Microsoft Windows 8.1 Update 3 - amd64
    Not using a script file.




    AutoAnalysis::
    CORRUPT: C:\Windows\winsxs\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_cb3bebd13fc5827b\icrav03.rat
    CORRUPT: C:\Windows\winsxs\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_6f1d504d87681145\icrav03.rat


    SUMMARY: Some corruptions could not be fixed automatically. Seek advice from helper or sysnative.com.
    CBS & SFC total detected corruption count: 2
    CBS & SFC total unimportant corruption count: 0
    CBS & SFC total fixed corruption count: 0
    SURT total detected corruption count: 0
    SURT total unimportant corruption count: 0
    SURT total fixed corruption count: 0
    AutoAnalysis:: directive completed successfully.




    Successfully processed all directives.
    SFCFix version 3.0.0.0 by niemiro has completed.
    Currently storing 0 datablocks.
    Finish time: 2016-11-10 15:46:07.493
    ----------------------EOF-----------------------


    I'm not using Microsoft Explorer much but it seems that i might have problems with future updates.

    Thanks


    • Ad Bot

      advertising
      Beep.

        
       

  2. #2

    Re: icrav03.rat corruption

    in case you want to take a look at the logscbs.zipcbs.zip

  3. #3

    Re: icrav03.rat corruption

    i have tried my luck with kb3197873 which is security only version of Nov rollup - but problem returnedcbs.zip

  4. #4

    Re: icrav03.rat corruption

    I have mixed up a fix with both rat files taken from another machine.


    SFCFix version 3.0.0.0 by niemiro.
    Start time: 2016-11-14 21:28:47.058
    Microsoft Windows 8.1 Update 3 - amd64
    Using .zip script file at d:\Users\Pawel\Desktop\SFCFix.zip [0]




    PowerCopy::
    Successfully took permissions for file or folder C:\Windows\WinSxS\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_6f1d504d87681145\icrav03.rat
    Successfully took permissions for file or folder C:\Windows\WinSxS\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_6f1d504d87681145\msrating.dll
    Successfully took permissions for file or folder C:\Windows\WinSxS\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_cb3bebd13fc5827b\icrav03.rat
    Successfully took permissions for file or folder C:\Windows\WinSxS\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_cb3bebd13fc5827b\msrating.dll

    Successfully copied file d:\Users\Pawel\AppData\Local\niemiro\Archive\WinSxS\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_6f1d504d87681145\icrav03.rat to C:\Windows\WinSxS\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_6f1d504d87681145\icrav03.rat.
    Successfully copied file d:\Users\Pawel\AppData\Local\niemiro\Archive\WinSxS\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_6f1d504d87681145\msrating.dll to C:\Windows\WinSxS\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_6f1d504d87681145\msrating.dll.
    Successfully copied file d:\Users\Pawel\AppData\Local\niemiro\Archive\WinSxS\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_cb3bebd13fc5827b\icrav03.rat to C:\Windows\WinSxS\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_cb3bebd13fc5827b\icrav03.rat.
    Successfully copied file d:\Users\Pawel\AppData\Local\niemiro\Archive\WinSxS\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_cb3bebd13fc5827b\msrating.dll to C:\Windows\WinSxS\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_cb3bebd13fc5827b\msrating.dll.

    Successfully restored ownership for C:\Windows\WinSxS\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_6f1d504d87681145\icrav03.rat
    Successfully restored permissions on C:\Windows\WinSxS\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_6f1d504d87681145\icrav03.rat
    Successfully restored ownership for C:\Windows\WinSxS\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_6f1d504d87681145\msrating.dll
    Successfully restored permissions on C:\Windows\WinSxS\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_6f1d504d87681145\msrating.dll
    Successfully restored ownership for C:\Windows\WinSxS\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_cb3bebd13fc5827b\icrav03.rat
    Successfully restored permissions on C:\Windows\WinSxS\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_cb3bebd13fc5827b\icrav03.rat
    Successfully restored ownership for C:\Windows\WinSxS\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_cb3bebd13fc5827b\msrating.dll
    Successfully restored permissions on C:\Windows\WinSxS\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_cb3bebd13fc5827b\msrating.dll
    PowerCopy:: directive completed successfully.




    Successfully processed all directives.
    SFCFix version 3.0.0.0 by niemiro has completed.
    Currently storing 4 datablocks.
    Finish time: 2016-11-14 21:28:47.245
    Script hash: Jpntn+i4zGeI8WmO+NzhuBnKXLaki0f2DSXJ98uL0Lc=
    ----------------------EOF-----------------------

  5. #5

    Re: icrav03.rat corruption

    Unfortunately this didn't help.

    I'm getting a message that both rats couldn't be decompressed

    attached sfc.txt

    Can anything be done?

    Thanks

  6. #6
    Administrator
    Windows Update Instructor
    Security Analyst

    Join Date
    Oct 2014
    Posts
    17,349

    Re: icrav03.rat corruption

    Sorry for the delay. Are you still in need of assistance?

  7. #7

    Re: icrav03.rat corruption

    thanks for asking
    unfortunately i wasn't able to fix it on my own.
    so please give it a try.

  8. #8
    Administrator
    Windows Update Instructor
    Security Analyst

    Join Date
    Oct 2014
    Posts
    17,349

    Re: icrav03.rat corruption

    OK, please start with the following so I can get current logs.

    SFC Scan
    1. Right-click on the Start button and select Command Prompt (Admin)
    2. When command prompt opens, Copy (Ctrl+C) and Paste (Right-click > Paste) the following command into it, then press Enter
    sfc /scannow

    3. Once it finishes, copy and paste the following into the command-prompt window and press Enter.
    copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"

    4. Once this has completed please go to your Desktop and you will find CBS.txt => Right-click on this file and choose Send To...Compressed (zipped folder). Please upload this zipped file CBS.zip to this thread

    Please Note:: if the file is too big to upload to your next post please upload via a service such as Dropbox or One Drive or SendSpace and just provide the link.

  9. #9

    Re: icrav03.rat corruption


  10. #10
    Administrator
    Windows Update Instructor
    Security Analyst

    Join Date
    Oct 2014
    Posts
    17,349

    Re: icrav03.rat corruption

    I'm unable to download the zip. Please use SendSpace instead. Thanks.

  11. #11

    Re: icrav03.rat corruption

    sorry. i checked before pasting the link and it did work for me.
    trying this one
    Download cbs.zip from Sendspace.com - send big files the easy way


  12. #12
    Administrator
    Windows Update Instructor
    Security Analyst

    Join Date
    Oct 2014
    Posts
    17,349

    Re: icrav03.rat corruption

    Thanks. Please do the following.

    Step#1 - SFCFix Script
    Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.
    1. Download SFCFix.exe (by niemiro) and save this to your Desktop. If you still have this on your desktop from downloading previously, you don't need to re-download.
    2. Download the file below, SFCScript.txt, and save this to your Desktop.
    3. Save any open documents and close all open windows.
    4. On your Desktop, you should see two files: SFCFix.exe and SFCScript.txt.
    5. Drag the file SFCScript.txt onto the file SFCFix.exe and release it.
    6. SFCFix will now process the script.
    7. Upon completion, a file should be created on your Desktop: SFCFix.txt.
    8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please
    Attached Files Attached Files

  13. #13

    Re: icrav03.rat corruption

    Scan results:
    SFCFix version 3.0.0.0 by niemiro.
    Start time: 2016-12-03 22:48:19.234
    Microsoft Windows 8.1 Update 3 - amd64
    Using .txt script file at d:\Users\Pawel\Desktop\SFCScript.txt [0]




    FileScan::
    [0: 1] C:\SFCFix\Backups\C\Windows\WinSxS\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_6f1d504d87681145\icrav03.rat
    File is untraceable.
    Found: M8O6lD2NJzQXLcl7IM5vCIGD6IK5/4HYmWI0aSKRGVY=
    Version number not available.
    Trace not available.



    [1: 1] C:\SFCFix\Backups\C\Windows\WinSxS\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_cb3bebd13fc5827b\icrav03.rat
    File is untraceable.
    Found: M8O6lD2NJzQXLcl7IM5vCIGD6IK5/4HYmWI0aSKRGVY=
    Version number not available.
    Trace not available.



    [2: 1] C:\Windows\WinSxS\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18450_none_6f2b92ff875cc134\icrav03.rat
    File is untraceable.
    Found: F7T+Ha9wQxAj3l/HInshW3eU5tpdOBYg5epGvozFtb8=
    Version number not available.
    Trace not available.



    [3: 1] C:\Windows\SysWOW64\icrav03.rat
    File is untraceable.
    Found: zW+HxvMZQlzIGdOo+HzxsveroP6yl5lWK3CxFjLo0W4=
    Version number not available.
    Trace not available.



    [4: 1] C:\Windows\System32\icrav03.rat
    File is untraceable.
    Found: zW+HxvMZQlzIGdOo+HzxsveroP6yl5lWK3CxFjLo0W4=
    Version number not available.
    Trace not available.



    [5: 1] C:\Windows\WinSxS\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18450_none_cb4a2e833fba326a\icrav03.rat
    File is untraceable.
    Found: F7T+Ha9wQxAj3l/HInshW3eU5tpdOBYg5epGvozFtb8=
    Version number not available.
    Trace not available.



    [6: 1] C:\Windows\WinSxS\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18500_none_cb3a5d253fc6cfa8\icrav03.rat
    File is untraceable.
    Found: Ysg7YHa0ql73oRGIsZONhBr2FGy7IoUQQb+lTzBgnas=
    Version number not available.
    Trace not available.



    [7: 1] C:\Windows\WinSxS\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18500_none_6f1bc1a187695e72\icrav03.rat
    File is untraceable.
    Found: Ysg7YHa0ql73oRGIsZONhBr2FGy7IoUQQb+lTzBgnas=
    Version number not available.
    Trace not available.



    [8: 1] C:\Windows\WinSxS\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_cb3bebd13fc5827b\icrav03.rat
    File is untraceable.
    Found: zW+HxvMZQlzIGdOo+HzxsveroP6yl5lWK3CxFjLo0W4=
    Version number not available.
    Trace not available.



    [9: 1] C:\Windows\WinSxS\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_6f1d504d87681145\icrav03.rat
    File is untraceable.
    Found: zW+HxvMZQlzIGdOo+HzxsveroP6yl5lWK3CxFjLo0W4=
    Version number not available.
    Trace not available.



    [10: 1] C:\Windows\SoftwareDistribution\Download\fb6d682ee3f4150209243a6acb6d8e46\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18450_none_6f2b92ff875cc134\icrav03.rat
    File is untraceable.
    Found: zW+HxvMZQlzIGdOo+HzxsveroP6yl5lWK3CxFjLo0W4=
    Version number not available.
    Trace not available.



    [11: 1] C:\Windows\SoftwareDistribution\Download\fb6d682ee3f4150209243a6acb6d8e46\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18450_none_cb4a2e833fba326a\icrav03.rat
    File is untraceable.
    Found: zW+HxvMZQlzIGdOo+HzxsveroP6yl5lWK3CxFjLo0W4=
    Version number not available.
    Trace not available.
    FileScan:: directive completed successfully.




    Successfully processed all directives.
    SFCFix version 3.0.0.0 by niemiro has completed.
    Currently storing 4 datablocks.
    Finish time: 2016-12-03 22:48:21.156
    Script hash: 6OgjBied/z7Cua8YmhJHF2KYcToAVG6kFRwpp915cjc=
    ----------------------EOF-----------------------

  14. #14
    Administrator
    Windows Update Instructor
    Security Analyst

    Join Date
    Oct 2014
    Posts
    17,349

    Re: icrav03.rat corruption

    Please start with the following.

    Step#1 - SFCFix Script
    Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

    1. Download SFCFix.exe (by niemiro) and save this to your Desktop. If you still have this on your desktop from downloading previously, you don't need to re-download.
    2. Download the file below, SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
    3. Save any open documents and close all open windows.
    4. On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
    5. Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
    6. SFCFix will now process the script.
    7. Upon completion, a file should be created on your Desktop: SFCFix.txt.
    8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please
    Attached Files Attached Files

  15. #15

    Re: icrav03.rat corruption

    ok. Done.
    SFCFix version 3.0.0.0 by niemiro.
    Start time: 2016-12-04 23:52:22.629
    Microsoft Windows 8.1 Update 3 - amd64
    Using .zip script file at d:\Users\Pawel\Desktop\SFCFix.zip [0]




    PowerCopy::
    Successfully took permissions for file or folder C:\Windows\Winsxs\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_6f1d504d87681145\icrav03.rat

    WARNING: File C:\Windows\Winsxs\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_6f1d504d87681145\icrav03.rat was not backed up as that would replace the current backup.
    Successfully copied file d:\Users\Pawel\AppData\Local\niemiro\Archive\Winsxs\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_6f1d504d87681145\icrav03.rat to C:\Windows\Winsxs\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_6f1d504d87681145\icrav03.rat.

    Successfully restored ownership for C:\Windows\Winsxs\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_6f1d504d87681145\icrav03.rat
    Successfully restored permissions on C:\Windows\Winsxs\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_11.0.9600.18525_none_6f1d504d87681145\icrav03.rat
    PowerCopy:: directive completed successfully.




    Successfully processed all directives.
    SFCFix version 3.0.0.0 by niemiro has completed.
    Currently storing 5 datablocks.
    Finish time: 2016-12-04 23:52:22.785
    Script hash: oBAnsPWAlXw8P29AeCll4wp03K134XXsSPtj1L3Ek9g=
    ----------------------EOF-----------------------

  16. #16
    Administrator
    Windows Update Instructor
    Security Analyst

    Join Date
    Oct 2014
    Posts
    17,349

    Re: icrav03.rat corruption

    Please do the following.

    SFC Scan
    1. Right-click on the Start button and select Command Prompt (Admin)
    2. When command prompt opens, Copy (Ctrl+C) and Paste (Right-click > Paste) the following command into it, then press Enter
    sfc /scannow

    3. Once it finishes, copy and paste the following into the command-prompt window and press Enter.
    copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"

    4. Once this has completed please go to your Desktop and you will find CBS.txt => Right-click on this file and choose Send To...Compressed (zipped folder). Please upload this zipped file CBS.zip to this thread

    Please Note:: if the file is too big to upload to your next post please upload via a service such as Dropbox or One Drive or SendSpace and just provide the link.

  17. #17

    Re: icrav03.rat corruption


  18. #18
    Administrator
    Windows Update Instructor
    Security Analyst

    Join Date
    Oct 2014
    Posts
    17,349

    Re: icrav03.rat corruption

    I need your COMPONENTS hive to verify a fix.

    Retrieve Components Hive
    1. Navigate to C:\Windows\System32\Config and locate the COMPONENTS file.
    2. Please copy this file to your desktop.
    Note: If you receive an error that this file is in-use, simply reboot your computer and try again.
    3. Right-click on this file on your desktop and select Send To...Compressed (zipped) folder. This will create a file named COMPONENTS.ZIP on your desktop.
    4. The file will likely be too large to upload here so please upload to SendSpace and just provide the link here.

  19. #19

  20. #20
    Administrator
    Windows Update Instructor
    Security Analyst

    Join Date
    Oct 2014
    Posts
    17,349

    Re: icrav03.rat corruption

    Thanks. Please do the following.

    Step#1 - SFCFix Script
    Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.
    1. Download SFCFix.exe (by niemiro) and save this to your Desktop. If you still have this on your desktop from downloading previously, you don't need to re-download.
    2. Download the file below, SFCScript.txt, and save this to your Desktop.
    3. Save any open documents and close all open windows.
    4. On your Desktop, you should see two files: SFCFix.exe and SFCScript.txt.
    5. Drag the file SFCScript.txt onto the file SFCFix.exe and release it.
    6. SFCFix will now process the script.
    7. Upon completion, a file should be created on your Desktop: SFCFix.txt.
    8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please
    Attached Files Attached Files

Page 1 of 2 12 Last

Similar Threads

  1. [SOLVED] Trying to fix a .Net Corruption via SFC
    By scorcher64 in forum Windows Update
    Replies: 7
    Last Post: 03-20-2016, 10:53 PM
  2. Replies: 1
    Last Post: 02-16-2016, 05:40 AM
  3. [SOLVED] SFC Corruption
    By Needles in forum Windows Update
    Replies: 10
    Last Post: 08-11-2015, 08:42 AM
  4. icrav03.rat and other various corruptions
    By Ainsley Harriott in forum Windows Update
    Replies: 1
    Last Post: 05-11-2015, 07:17 PM
  5. SFC corruption
    By Jeff in forum Windows Update
    Replies: 8
    Last Post: 11-29-2014, 04:06 AM

Log in

Log in