SFC SCANNOW found corrupt files cannot repair, the iasrecst.dll file

[thumpergirl]

Hello all ..this is my first post and I'm new to the forums. I appreciate any help in advance
So my problem is I ran a scan with Malwarebytes last December 16th 2018 and a file named iasrecst.dll in C:window\SysWOW64 came back as a trojan, immediately quarantined it.

This week I ran a sfc /scannow to do a system checkup and got the dreaded message that windows resource protection found corrupt files but could not repair them. I checked my CBS log and found that the iasrecst.dll was the culprit. Turns out Malwarebytes made a big mistake, that is an important application extension for the operating system and was a false positive that should never have been quarantined in the first place.

I checked the file on virus total and it's clean. returned it from quarantine thinking my sfc scan would go back to normal but it's still coming back with that file is corrupt. I'm not sure why. I have windows 7 home premium, I tried sfcfix and it came back with no errors. DISM isn't available for windows 7 users, I tried that. So if anyone can help I would greatly appreciate it. I just want it back to normal. I also have a good copy of the iasrecst.dll file on a flash drive from another computer with the same OS I can use if anyone has any ideas for that. Here is the error from my CBS log if that helps. Thank you all so much!

2019-01-13 01:18:56, Info CSI 00000321 [SR] Cannot repair member file [l:24{12}]"iasrecst.dll" of Microsoft-Windows-Networking-Internet_Authentication_Service_DataStore, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_IA32_ON_WIN64 (10), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch

 

[torchwood]

Hi Thumpergirl,

longshot

is that Quarentineed file still there, or did you request delete, usually held for 30 days before auto delete.

Roy

 

[thumpergirl]

Hello Roy,
Thank you for your reply. Luckily I did have the file in quarantine still. I keep them as a safety precaution and fortunately Malwarebytes doesn't automatically delete after 30 days, the user has the option to do so. I stated in my post I had returned it from quarantine but the sfc scan still had the file as corrupt..not sure if my post shows up on your end entirely. This is an issue posted on the Malwarebytes forum as well but has no resolution yet. They don't seem to know what to do.