The mrtRate service failed to start due to the following error: The system cannot find the file specified.

This error is a frequent one in Event Viewer and do not find any mrtrate.sys driver anywhere, and have been advised it is linked to Quicken or QuickBooks.  This is a Windows 7 system and there is a Quicken2008 and when it loads, she advises me it shows copy1.

The mrtRate service failed to start due to the following error:
The system cannot find the file specified.

Any idea how to help when I cannot find it via searching the system?

This was upgraded from XP to Windows 7 Home Premium SP1 - 64 bit Dell Inspiron 660.
LVL 27
Asta CuTechnical consultant & graphic designAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

gheistCommented:
mrtrate.sys is marimba QoS sensing driver.
you can disable it via "msconfig" or "autoruns", only that quicken software updates will download as normal downloads, not as idle downloads, whatever that means.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Asta CuTechnical consultant & graphic designAuthor Commented:
I see no such option to disable using msconfig.  Did you mean the background intelligent transfer service?   I find no other options using msconfig that you mention.  Unless I'm mistaken, I thought that was required to keep WindowsUpdates current and running.  

Thank you for your help.
0
gheistCommented:
It is hidden service AKA driver. Try autoruns from ms sysinternals or in device manager show hidden devices.
0
Big Business Goals? Which KPIs Will Help You

The most successful MSPs rely on metrics – known as key performance indicators (KPIs) – for making informed decisions that help their businesses thrive, rather than just survive. This eBook provides an overview of the most important KPIs used by top MSPs.

Asta CuTechnical consultant & graphic designAuthor Commented:
I Went through device manager show all hidden devices all non-plug-and-play everything and I never find that anywhere.
I don't know about sis internals but tell me about that I'll try that tomorrow
0
gheistCommented:
You need to look for error devices...
0
Asta CuTechnical consultant & graphic designAuthor Commented:
All items shown in device manager, including hidden devices; there are no errors or problems anywhere.  

All devices checked and tested show no problems.  I do not get it.  Will close this shortly; but will try running cCleaner again.
0
Asta CuTechnical consultant & graphic designAuthor Commented:
I am now suspecting it has to do with performance counters, among other things I've found on her system.

Example being another Q I had opened here and closed ...  This was the event log error, code 3002 ...

The performance counter explain text string value in the registry is not formatted correctly. The malformed string is . The first DWORD in the Data section contains the index value to the malformed string while the second and third DWORDs in the Data section contain the last valid index values.


This explains potential fix, but unable to pursue until next weekend when I can return to her system.  Do you think it is related since no problems found on hardware at all?

http://social.technet.microsoft.com/wiki/contents/articles/1376.event-id-3002-microsoft-windows-loadperf.aspx\\
0
Asta CuTechnical consultant & graphic designAuthor Commented:
Ran cCleaner and scanned/saved and fixed registry issues; this problem appears solved.  Won't know more until I return this weekend.
0
gheistCommented:
You need to trigger quicken updates somehow.
0
Asta CuTechnical consultant & graphic designAuthor Commented:
She wants never to update her quicken
She chooses to remain off any network etc with her uses of that app
0
gheistCommented:
Somehow it triggers update service that hits own driver missing.
0
Asta CuTechnical consultant & graphic designAuthor Commented:
I'm lost in how to pursue this further.  The earliest I'll be back at the system to discuss with her is next week; should I leave this open or how to handle this?

Thank you for  your efforts.
0
gheistCommented:
by that time autoupdater will kick in and error will pop up again
get autoruns.exe from sysinternals.com and remove or disable failing driver.
when autoupdater kicks in next time at least confusing message will not display.
0
Asta CuTechnical consultant & graphic designAuthor Commented:
Will return with update when I can revisit this system and try your recommendations.   This will be early next week.
0
Asta CuTechnical consultant & graphic designAuthor Commented:
I've never used this tool before and did run the exe and saved the txt file; a number of odd entries that I do not see in startup but this scan found.  Posting here?
0
Asta CuTechnical consultant & graphic designAuthor Commented:
Tried to save as TXT file, embedded here and looks like non ascii / code, so deleted.

will check back onto this system tomorrow
0
Asta CuTechnical consultant & graphic designAuthor Commented:
I'll await further input; event log still shows ongoing issues ...  such as
The performance counter explain text string value in the registry is not formatted correctly. The malformed string is . The first DWORD in the Data section contains the index value to the malformed string while the second and third DWORDs in the Data section contain the last valid index values.

and the mrtrate issue.

Here is what the autorun shows that "appear" to be problems, and unclear looking for guidance..

Sysinternals autoruns shows
logon file not found c:-windows\system32\ie4uinit.exe  NO IDEA why, this system has IE 11, all updated .... and she doesn't use IE, but rather Chrome as default browser of choice

Shows Scheduled Tasks - c:\windows\system32\gathernetworkinfo.vbs    HUH?  What this is and why I do not know.  

Drivers:  MBAM - file not found c:\windows\system32\drivers\MBAMSwissArmy.sys   Do not find this on her system to be loading.
Drivers:  mfehidk01 File not found  \Device\mfehidk01.sys   ... no idea what this is
and the culprit:  mrtRate  File not found:  C:\Windows\System32\Drivers\mrtRate.sys  Where is this hiding?

TrueSight - no idea what this is either nor she.  c:\windows\system32\drivers\truesight.sys
On the tag of the sysinternals run is default and called ImageHijaks and is c:\program files\iexplore.exe
0
gheistCommented:
mfehidk is mcafee antivirus.
mbam is malvarebytes antimalvare
having them both disabled brings us to nasties on the computer:
truesight and iexplore are components of browser hijackers.

Clean viruses and come back to ask again (not in this question)
Virus (DNS pollution in turn) can be cause of initial error message.
0
Asta CuTechnical consultant & graphic designAuthor Commented:
I'll return to her system this coming weekend, rescan and return.   Am I understanding you correctly, that if the truesight and iexplore items are "removed", this may resolve the mrtrate issue?
0
gheistCommented:
Some expertise on virus cleanin is on the way....
Odds are high cleaning browser hijack will restore quicken functionality too.
0
Asta CuTechnical consultant & graphic designAuthor Commented:
Thanks for escalating.

When you said that Truesight was a browser hijacker, I did find that it "may" be part of rogue killer, which was one of the recommendations along the way here to uncovering the problem adding to this issue.

More confusion, but appreciative of any added insights.
0
Asta CuTechnical consultant & graphic designAuthor Commented:
OK, have done everything possible to no avail.  Want to close this and thank everyone for their help.  Don't want to mislead anyone by the process of closing this since the mrtRate issue persists.  I don't plan to revisit her system for another few weeks; no fair letting you all hold.
0
Asta CuTechnical consultant & graphic designAuthor Commented:
Closing for now, thanks.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 7

From novice to tech pro — start learning today.