icrav03.rat corruption unable to install updates

This is the error message when i try to uninstall the update:

2018-10-22 13_47_34-METAPROD - 10.0.0.88 - Verbinding met extern bureaublad.png

I Googled the error and it seems uninstalling is not supported for this update.

I also tried uninstalling and re-installing Internet Explorer because the icrav03.rat is part of Internet Explorer (Microsoft-Windows-IE-Ratings file).

So this is what i tried, first uninstall IE

dism /online /disable-feature:"Internet-Explorer-Optional-amd64"

Rebooted the machine and reinstallad IE again with:


dism /online /enable-feature:"Internet-Explorer-Optional-amd64"

Aftherwards i executed a 'sfc /scannow' again, but with the same results.
 
FRST Registry Search
 1. Click your Start button and choose Server Manager.
2. Click the Add Roles or Features link. This will bring up the Add Roles or Features Wizard dialog.
3, Click Next until Features option becomes available. When it does, click on it. Wait until this dialog populates with information. If this does not happen for some reason, please continue with the steps anyway.
Note: This loads your components hive which is what we want. Please keep this dialog open while you perform the remaining steps.
4. Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the 64-bit Version so please ensure you download that one.
5. Run FRST64 by Right-Clicking on the file and choosing Run as administrator.
6. Copy and paste KB3205401 into the Search box and click the Search Registry button.
7. When the scan is complete a notepad window will open with the results. Please attach this to your next reply. It is saved on your desktop named SearchReg.txt.
8. You may close any remaining open windows now.
 
Step#1 - FRST Fix
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
1. Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the 64-bit Version so please ensure you download that one.
2. Download attached file and save it to the Desktop.
Note. It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work (in this case...the desktop).
3. Run FRST64 by Right-Clicking on the file and choosing Run as administrator.
4. Press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
5. When finished FRST64 will generate a log on the Desktop (Fixlog.txt). Please post the contents of it in your reply.
 

Attachments

Here the results. Afterwards i ran another 'sfc /scannow'.
I also did a new registry search for KB3205401.
 

Attachments

GSmartControl
Follow the instructions below to test your hard drive health with GSmartControl:



  • Download GSmartControl and save it on your Desktop;
  • Execute gsmartcontrol.exe; Let the install complete and launch the programme.
  • Identify your drive in the list, and double-click on it to bring up it's window (usually you'll find your drive by it's size or it's brand name);
  • Go in the Perform Tests tab, then select Extended Self-test in the Test type drop-down list and click on Execute (this test can take a few hours to complete);
  • Once the test is over, the results will be displayed at the bottom of the window. Please copy and paste these results in your next reply;
  • Also, go in the Attributes tab and if you have any entries highlighted in red or pink, take a screenshot of the GSmartControl window and attach it in your next reply;
    info_failing.png
 
The hardware is ok. The system runs on Microsoft HyperV VM with an Areca RAID SSD system (very handy to make a snapshot before a FRST64 action). The Areca storage management tools show the storage is perfectly healthy. Also another Windows 2012R2 VM runs without problems on the same hypervisor and storage.

About the registry search for KB3205401. Was your intention to eliminate all keys with KB3205401 in it ?
 
Thanks for holding on !

Most updates install without a problem. Only two updates keeps returning:


KB4054519
KB4462926

When i look at the installed updates history also these two updates are noted a successfully installed, but they keep popping up as new updates.

When i install one of them again the update seems to install without a failure again. But last step is to reboot the system. Then the message shows up 'failure configuring windows updates reverting changes' and the system reboots again. After the second reboot i am able to login again and Windows update offers the two updates again.
 
SFCFix Script

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.


  1. Download SFCFix.exe (by niemiro) and save this to your Desktop.
  2. Download the attached file, SFCFixScript.txt, and save this to your Desktop. Ensure that this file is named SFCFixScript.txt - do not rename it.
  3. Save any open documents and close all open windows.
  4. On your Desktop, you should see two files: SFCFix.exe and SFCFixScript.txt.
  5. Drag the file SFCFixScript.txt onto the file SFCFix.exe and release it.
  6. SFCFix will now process the script.
  7. Upon completion, a log should be created on your Desktop: SFCFix.txt.
  8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this into your next post for me to analyse please - put [CODE][/CODE] tags around the log to break up the text.
 

Attachments

Here the results:

Code: 
SFCFix version 3.0.0.0 by niemiro.Start time: 2018-10-29 00:45:34.238
Microsoft Windows Server 2012 R2 Update 3 - amd64
Using .txt script file at C:\Users\PluymAdmin.domain1\Desktop\SFCFixScript.txt [0]








FileScan::
[0: 1] C:\Windows\WinSxS\amd64_iscsi.inf_31bf3856ad364e35_6.3.9600.18470_none_2d88c8d8c79967be\iscsi.inf
File is untraceable.
 Found: /CaeWA8J7mXQXDn1OMcYjL59lLCxn+yjA14CSEyeaDQ=
 Version number not available.
Trace not available.






[1: 1] C:\Windows\Inf\iscsi.inf
File is untraceable.
 Found: DqB8KkNEk/bqH8XHfIqaVdSiDmNNivSpKoniEBA9QDo=
 Version number not available.
Trace not available.






[2: 1] C:\Windows\WinSxS\amd64_iscsi.inf_31bf3856ad364e35_6.3.9600.18624_none_2dc2dd68c76d3bb3\iscsi.inf
File is untraceable.
 Found: DqB8KkNEk/bqH8XHfIqaVdSiDmNNivSpKoniEBA9QDo=
 Version number not available.
Trace not available.






[3: 1] C:\Windows\WinSxS\amd64_iscsi.inf_31bf3856ad364e35_6.3.9600.18779_none_2d91d124c7914342\iscsi.inf
File is untraceable.
 Found: 1Upci9L3Mcey7LWlmV3R67MGKbUHEndp9xNKFy9qQrw=
 Version number not available.
Trace not available.






[4: 1] C:\Windows\WinSxS\amd64_iscsi.inf_31bf3856ad364e35_6.3.9600.18968_none_2d9ba492c78a0848\iscsi.inf
File is untraceable.
 Found: obyUqlV7SQpNVLAZ2Kdl+7Ou7ZBVfTCHEGtqk+wFuEU=
 Version number not available.
Trace not available.
FileScan:: directive completed successfully.








Successfully processed all directives.
SFCFix version 3.0.0.0 by niemiro has completed.
Currently storing 2 datablocks.
Finish time: 2018-10-29 00:45:43.708
Script hash: /1OzVxbGw4kMyaqtEEZx8/67Ob5Mw8RXujcZJFbHY7c=
----------------------EOF-----------------------
 
I need one more piece of info.

Step#1 - Export SideBySide



  1. Click on the Start button and in the search box, type regedit
  2. When you see regedit on the list, right-click on it and select Run as administrator
  3. When regedit opens, using the left pane, navigate to the following registry key and select it by clicking on it once.

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide
  4. Once selected, click File > Export....
  5. Change the Save as type: to Registry Hive Files (*.*)
  6. Name this file SxS (with no file extension) and save it to your Desktop.



Once done please upload this file via Dropbox or One Drive or SendSpace.
 
Step#1 - FRST Fix
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
1. Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the 64-bit Version so please ensure you download that one.
2. Download attached file and save it to the Desktop.
Note. It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work (in this case...the desktop).
3. Run FRST64 by Right-Clicking on the file and choosing Run as administrator.
4. Press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
5. When finished FRST64 will generate a log on the Desktop (Fixlog.txt). Please post the contents of it in your reply.
 

Attachments

Thanks for holding on, here the results:

Code: 
Fix result of Farbar Recovery Scan Tool (x64) Version: 07.11.2018Ran by PluymAdmin (08-11-2018 19:08:01) Run:1
Running from C:\b
Loaded Profiles: PluymAdmin & scanner (Available Profiles: vma & ldaps & Administrator & PluymAdmin & scanner & PluymAdmin & Administrator)
Boot Mode: Normal
==============================================


fixlist content:
*****************
CreateRestorePoint:
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_none_dbf870e71a3e7a11\11.0]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_none_7fd9d56361e108db\11.0]


StartRegedit:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_none_7fd9d56361e108db\11.0]
"11.0.9600.16384"=hex:01
@="11.0.9600.16384"
"11.0.9600.17031"=hex:01
"11.0.9600.17416"=hex:01
"11.0.9600.17239"=hex:01
"11.0.9600.17278"=hex:01
"11.0.9600.17351"=hex:01
"11.0.9600.17631"=hex:01






[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_none_7fd9d56361e108db\11.0]
"11.0.9600.16384"=hex:01
@="11.0.9600.16384"
"11.0.9600.17031"=hex:01
"11.0.9600.17416"=hex:01
"11.0.9600.17239"=hex:01
"11.0.9600.17278"=hex:01
"11.0.9600.17351"=hex:01
"11.0.9600.17631"=hex:01
EndRegedit:
*****************


Error: (0) Failed to create a restore point.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_microsoft-windows-ie-ratings_31bf3856ad364e35_none_dbf870e71a3e7a11\11.0 => removed successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_none_7fd9d56361e108db\11.0 => removed successfully


====> Registry


==== End of Fixlog 19:08:02 ====

Afterwards i tried to install the updates again, but they roll-back again after rebooting.
 
You must log in or register to reply here.

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top