[SOLVED] iasrecst.dll and the malwarebytes oops=corrupt winsxs files

[RHB]

Win 7 user, not a programmer
resistant to change, still using a flip phone

symptoms:
Jan 8? win update put an end to my peer to peer links
Much head scratching resulting in further hair loss
ran sfc scannow to see if anything came up
it did
it reminded me that I had seen something about malwarebytes with same filename
restore did not work in their program
search for corrupt dlls lead to your door
now I stand here, hat in hand

not sure if this will fix my peer to peer issue, or if it even has anything to do with it, but after applying KB4487345, I am still being held incommunicado

SFCFix scanned my Win7 SP1 DVD, but apparently did not find what it wanted there.

I snipped the relevant part of the CBS log file below.

2019-01-15 11:31:16, Info CSI 000002a5 [SR] Verifying 100 (0x0000000000000064) components
2019-01-15 11:31:16, Info CSI 000002a6 [SR] Beginning Verify and Repair transaction
2019-01-15 11:31:18, Info CSI 000002a8 [SR] Cannot repair member file [l:24{12}]"iasrecst.dll" of Microsoft-Windows-Networking-Internet_Authentication_Service_DataStore, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_IA32_ON_WIN64 (10), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2019-01-15 11:31:24, Info CSI 000002af [SR] Cannot repair member file [l:24{12}]"iasrecst.dll" of Microsoft-Windows-Networking-Internet_Authentication_Service_DataStore, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_IA32_ON_WIN64 (10), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2019-01-15 11:31:24, Info CSI 000002b0 [SR] This component was referenced by [l:202{101}]"Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.WindowsFoundationDelivery"
2019-01-15 11:31:24, Info CSI 000002b2 [SR] Could not reproject corrupted file [ml:48{24},l:46{23}]"\??\C:\Windows\SysWOW64"\[l:24{12}]"iasrecst.dll"; source file in store is also corrupted
2019-01-15 11:31:24, Info CSI 000002b4 [SR] Verify complete
2019-01-15 11:33:48, Info CSI 000003cd [SR] Repairing 1 components
2019-01-15 11:33:48, Info CSI 000003ce [SR] Beginning Verify and Repair transaction
2019-01-15 11:33:48, Info CSI 000003d0 [SR] Cannot repair member file [l:24{12}]"iasrecst.dll" of Microsoft-Windows-Networking-Internet_Authentication_Service_DataStore, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_IA32_ON_WIN64 (10), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2019-01-15 11:33:48, Info CSI 000003d2 [SR] Cannot repair member file [l:24{12}]"iasrecst.dll" of Microsoft-Windows-Networking-Internet_Authentication_Service_DataStore, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_IA32_ON_WIN64 (10), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2019-01-15 11:33:48, Info CSI 000003d3 [SR] This component was referenced by [l:202{101}]"Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.WindowsFoundationDelivery"
2019-01-15 11:33:48, Info CSI 000003d5 [SR] Could not reproject corrupted file [ml:48{24},l:46{23}]"\??\C:\Windows\SysWOW64"\[l:24{12}]"iasrecst.dll"; source file in store is also corrupted
2019-01-15 11:33:48, Info CSI 000003d7 [SR] Repair complete
2019-01-15 11:33:48, Info CSI 000003d8 [SR] Committing transaction
2019-01-15 11:33:48, Info CSI 000003dc [SR] Verify and Repair Transaction completed. All files and registry keys listed in this transaction have been successfully repaired

 

[PeterJ]

Hello and welcome,

Follow the instructions below please.

WARNING! The following fix is specific to the user's system in this thread only. No one else should follow these instructions, as it could damage your system.

• Download the attachment SFCFix.zip and save it on your desktop.
• Save any work you have open, and close all programs.
• Drag the SFCFix.zip file over the SFCFix.exe executable and release it.
  
  
• SFCFix will launch, let it complete.
• Once done, a file will appear on your desktop, called SFCFix.txt.
• Open the file, then copy and paste its content in your next reply.

 

[RHB]

Hello and welcome,

Follow the instructions below please.

WARNING! The following fix is specific to the user's system in this thread only. No one else should follow these instructions, as it could damage your system.

• Download the attachment SFCFix.zip and save it on your desktop.
• Save any work you have open, and close all programs.
• Drag the SFCFix.zip file over the SFCFix.exe executable and release it.
  
  
• SFCFix will launch, let it complete.
• Once done, a file will appear on your desktop, called SFCFix.txt.
• Open the file, then copy and paste its content in your next reply.

Thanks for helping.
Did the dragon drop, below is the output
SFCFix version 3.0.1.0 by niemiro.
Start time: 2019-01-19 09:24:22.468
Microsoft Windows 7 Service Pack 1 - amd64
Using .zip script file at C:\Users\Rob Benton\Desktop\SFCFix.zip [0]


PowerCopy::
Successfully took permissions for file or folder C:\Windows\winsxs\wow64_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.1.7601.17514_none_39a9406d8100038f\iasrecst.dll
Successfully copied file C:\Users\Rob Benton\AppData\Local\niemiro\Archive\wow64_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.1.7601.17514_none_39a9406d8100038f\iasrecst.dll to C:\Windows\winsxs\wow64_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.1.7601.17514_none_39a9406d8100038f\iasrecst.dll.
Successfully restored ownership for C:\Windows\winsxs\wow64_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.1.7601.17514_none_39a9406d8100038f\iasrecst.dll
Successfully restored permissions on C:\Windows\winsxs\wow64_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.1.7601.17514_none_39a9406d8100038f\iasrecst.dll
PowerCopy:: directive completed successfully.


Successfully processed all directives.
SFCFix version 3.0.1.0 by niemiro has completed.
Currently storing 1 datablocks.
Finish time: 2019-01-19 09:24:24.386
Script hash: gyBUL6CXl+FaMhpCOp0PdOrcBt4Y/HT5J0wNpS7b+30=
----------------------EOF-----------------------

 

[PeterJ]

Well done.
Check Windows Update again and report the result.
If it fails, run sfc /scannow again and attach the zipped cbs.log to your next reply.

 

[RHB]

Well done.
Check Windows Update again and report the result.
If it fails, run sfc /scannow again and attach the zipped cbs.log to your next reply.

Hi Peter,
Win update installed KB4480955 (optional).
I think it was OK. Not sure how to tell.

I ran SFC /SCANNOW, with result it found corrupt files and repaired them.
Am I done, or should I run it again?
Also, do you need me to upload the CBS.log?

Anyway, thanks for all the help.

Rob

 

[PeterJ]

Hi,

Looking good. Please provide the CBS.log.

 

[RHB]

Hi,

Looking good. Please provide the CBS.log.

I uploaded the CBS.log as it was ~660kB
Please take a look.

Than you very much.

Rob

 

[PeterJ]

Well done. We're finished.
You may remove the tools and log files used in this thread to clean up.

All the best.