Start Free Trial

asked on

The mrtRate service failed to start due to the following error: The system cannot find the file specified.

This error is a frequent one in Event Viewer and do not find any mrtrate.sys driver anywhere, and have been advised it is linked to Quicken or QuickBooks. This is a Windows 7 system and there is a Quicken2008 and when it loads, she advises me it shows copy1.

The mrtRate service failed to start due to the following error:
The system cannot find the file specified.

Any idea how to help when I cannot find it via searching the system?

This was upgraded from XP to Windows 7 Home Premium SP1 - 64 bit Dell Inspiron 660.

ASKER CERTIFIED SOLUTION

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

ASKER

I see no such option to disable using msconfig. Did you mean the background intelligent transfer service? I find no other options using msconfig that you mention. Unless I'm mistaken, I thought that was required to keep WindowsUpdates current and running.

Thank you for your help.

It is hidden service AKA driver. Try autoruns from ms sysinternals or in device manager show hidden devices.

ASKER

I Went through device manager show all hidden devices all non-plug-and-play everything and I never find that anywhere.
I don't know about sis internals but tell me about that I'll try that tomorrow

You need to look for error devices...

ASKER

All items shown in device manager, including hidden devices; there are no errors or problems anywhere.

All devices checked and tested show no problems. I do not get it. Will close this shortly; but will try running cCleaner again.

ASKER

I am now suspecting it has to do with performance counters, among other things I've found on her system.

Example being another Q I had opened here and closed ... This was the event log error, code 3002 ...

The performance counter explain text string value in the registry is not formatted correctly. The malformed string is . The first DWORD in the Data section contains the index value to the malformed string while the second and third DWORDs in the Data section contain the last valid index values.

This explains potential fix, but unable to pursue until next weekend when I can return to her system. Do you think it is related since no problems found on hardware at all?

http://social.technet.microsoft.com/wiki/contents/articles/1376.event-id-3002-microsoft-windows-loadperf.aspx\\

ASKER

Ran cCleaner and scanned/saved and fixed registry issues; this problem appears solved. Won't know more until I return this weekend.

You need to trigger quicken updates somehow.

SOLUTION

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Somehow it triggers update service that hits own driver missing.

ASKER

I'm lost in how to pursue this further. The earliest I'll be back at the system to discuss with her is next week; should I leave this open or how to handle this?

Thank you for your efforts.

SOLUTION

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

ASKER

Will return with update when I can revisit this system and try your recommendations. This will be early next week.

ASKER

I've never used this tool before and did run the exe and saved the txt file; a number of odd entries that I do not see in startup but this scan found. Posting here?

ASKER

Tried to save as TXT file, embedded here and looks like non ascii / code, so deleted.

will check back onto this system tomorrow

ASKER

I'll await further input; event log still shows ongoing issues ... such as
The performance counter explain text string value in the registry is not formatted correctly. The malformed string is . The first DWORD in the Data section contains the index value to the malformed string while the second and third DWORDs in the Data section contain the last valid index values.

and the mrtrate issue.

Here is what the autorun shows that "appear" to be problems, and unclear looking for guidance..

Sysinternals autoruns shows
logon file not found c:-windows\system32\ie4uinit.exe NO IDEA why, this system has IE 11, all updated .... and she doesn't use IE, but rather Chrome as default browser of choice

Shows Scheduled Tasks - c:\windows\system32\gathernetworkinfo.vbs HUH? What this is and why I do not know.

Drivers: MBAM - file not found c:\windows\system32\drivers\MBAMSwissArmy.sys Do not find this on her system to be loading.
Drivers: mfehidk01 File not found \Device\mfehidk01.sys ... no idea what this is
and the culprit: mrtRate File not found: C:\Windows\System32\Drivers\mrtRate.sys Where is this hiding?

TrueSight - no idea what this is either nor she. c:\windows\system32\drivers\truesight.sys
On the tag of the sysinternals run is default and called ImageHijaks and is c:\program files\iexplore.exe

mfehidk is mcafee antivirus.
mbam is malvarebytes antimalvare
having them both disabled brings us to nasties on the computer:
truesight and iexplore are components of browser hijackers.

Clean viruses and come back to ask again (not in this question)
Virus (DNS pollution in turn) can be cause of initial error message.

ASKER

I'll return to her system this coming weekend, rescan and return. Am I understanding you correctly, that if the truesight and iexplore items are "removed", this may resolve the mrtrate issue?

Some expertise on virus cleanin is on the way....
Odds are high cleaning browser hijack will restore quicken functionality too.

ASKER

Thanks for escalating.

When you said that Truesight was a browser hijacker, I did find that it "may" be part of rogue killer, which was one of the recommendations along the way here to uncovering the problem adding to this issue.

More confusion, but appreciative of any added insights.

SOLUTION

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

ASKER

Closing for now, thanks.