Computer shuts on and off some corrupted files - no virues now

Question

Listed below are some of the errors I found on event log in the laptop:
I have a Qosimo 8 megs of memory, windows 7 64 bit. Running AVAST 7.0 antivirus and Malwarebytes - both paid subscriptions. I think the model number is 830 530 I bought in 2009.
The shutdown problem has
been happening on and off for the last six months. I had two major instances of trojans taking over my machine and it caused constant shutdowns. AVAST worked with me on one and they had me use malwarebytes and spybot and hijack this. They took over my computer to get it up and running properly, but this new round of errors a trojan was found in the registry key and the startuptoolbar. Two nights ago I had another shut down several times and after running malwarebytes and antivirus I could find no errors so I’m leaning toward corrupted files? Is there anyway to fix these files without having to reformat the hard drive?
I did run a computer repair and a computer memory repair tonight using F8 and no problems were found by the computer. I’m not sure what to do with these errors in event viewer.. I get the toshiba error
quite often and it madely stops me from going online with my internet connection, and I had downloaded a newer version but same problem – I use windows repair in network and the error is always resetting the toshiba network IP. I just put a note into toshiba on that problem.
I also use microsoft silverlight for my fenderfuse application which needs that software operate properly. I’m not sure exactly what to do with that Custom dynamic link libraries are being loaded for every application. It states to check libraries – but what am I checking for? I do not have a lot of programs on the laptop but not sure what to look for in library?
Windows logs under Application
The description for Event ID 0 from source Ipod service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
If the event originated on another computer, the display information had to be saved with the event.
The following information was included with the event
The description for Event ID 0 from source SignInAssistant cannot be found. Either the component
That raises this event is not installed on your computer or the installation is corrupted. You can
Install or repair the component on the local computer.
If the event originated on another computer, the information had to be saved with the event. The following information was included with the event:
WLD InitializationTimerQueue. QueueWorkItem Started
The win logon notification subscriber <sessionEnv> was unavailable to handle anotification event.
The description for Event ID0 from source IViRegMgr cannot be found.
Same for AdobeARMservice
Same for User Profile Service
Critical events
System has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, rashed or lost power inexpertly.
Administrative
Events
Unloading the performance counter strings for service WmiApRpt failed. The first DWORD n the data section contains the error code.
The performance strings in the performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance Registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data Section, and LastHelp value is the third DWORD in the data section.
Several warnings on Toshiba Servicer Station. Error checking dependency (1df917db-3056-41a-bbac-0489a6b63d4dj: Unable to retrieve registry value.
Toshiba Service Station - skipping empty element (tsu:setup_args) (several errors on this one)
( I also installed the latest Toshiba service station and it did not fix the error problems in events log.  When I did a restore it was before softare update this was added so now my computer is working properly with windows on connecting to the internet wireless.)
Unloading the performance counter strings for service WmiApRpl (wmiaprpl) failed. The first Dword in the Data section contains the error code.
Failed extract of third-party root list from auto update cab at: www.download.windowsupdate.com/msdownload/udate/v3/static/trustedr/en/authrooststi.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
Biggie? Custom dynamic link libraries are being loaded for every application. The system administration should review the list of libraries to ensure they are related to trusted applications.
Audit events have been dropped by the transport. 0
The system has rebooted without cleanly shutting down first. Kernel-power - this has happened several times.
The performance strings in the Performance registry value is corrupted when process Performance extension counter provided. The BaseIndex value from the Performance registry is the first DWORD in the data section, last counter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the data section.
Sometimes my computer shuts down often on its own and I find a Trojan - other times it shuts down often during a start up and I find no viruses as was the case yesterday.  Today I did not get on the internet and the computer worked fine.  
 I guess I need to know if there is a way to reinstall the corrupted files without having to go back to the default settings when I got the computer.  Does toshiba have a windows repair disc that works better then what I did with using F8 and having a system repair and memory check done that found no errors?  I also installed the latest Toshiba service station and it did not fix the error problems in events log.  When I did a restore it was before this was added so now my computer is working properly with windows on connecting to the internet wireless.
Malwarebytes said that by looking at these event viewer logs that it does not appear that I have a virus now but I do have corrupted files and can toshiba help me in getting them fixed.  I really hate to do a complete reformat.
Thanks
Rose
Solved!
Go to Solution.

Answer 1

Event Viewer  5/14 events
Window logs
Application –
Information - Software protection service has stopped
Error – Unloading the performance counter strings for service wmiaprpl failed.  The first Dword in the data section contains the error code
The performance strings in the performance registry value is corrupted when process Performance ext
The winlogon notification subscriber <SessionEnv> was unavailable tohandle a notification events
Error – Your computer was not assigned an address from the network (by the DHCP) Service) for the Network Card with network address0x701A043A07AE.  Your computer willcontinue to try and obtain an address on its own from the network address (DHCP ) server.
Failed extract of third-party root list from auto update cab   CAPI2
Warning – customer dynamic link libraries are being loaded for every application.  The system Administrator should review the list of libraries to ensure they are related to Trusted Aplications.
The performance strings in the Performance registry value is corrupted when process Performance extension counter provider.  The baseindex value from the performance registry is the first Dword in the data section, etc. – this error shows up often for today 5/14  (on line the aqnswer to this error is  -
 Performance counters are collected and used by services and applications. If they are installed incorrectly or with improper permissions, performance counters cannot be loaded, and services or applications cannot collect or interpret the data.
I noticed that software protection stopped and then it showed software protection working.  I did not get any critical stop errors like I did before but that is because I don’t have any Trojans or viruses.  I ran a full scan with both Avast and Malwarebytes yesterday and no problems.
Under system for today I see
The multimedia Class Scheduler Service entered the stopped state.
The application experienced service entered the stopped state
Under application Window logs for today
Fault bucket 130885241, type 5 Event Name PNDriverimportError  response: not available
This is a warning error:
Windows detected your registry file is still in use by other applications or services .  The file will be unloaded now.  The applicationsor services that your registry file may not function properly afterwards.
10  user registry handles leaked from \Registry\User\(this section covered several registry problems I sent the note online and this is what they state:  Cause this behavior occurs because the windows operating system automatically closes any registry handle to a user profie that is left open in an application.  User Action – this is a warning event the application that is listed in the event detail is leaving the registry hand open, and it should be investigated.
I don't know how serious this probems are - I didn't like seeing the software security being stopped.  But then it started up.  I have copied everything personal on this laptop so I am ready to reformat if needed.  
I still have the problem about IE not opening links unless I right button click to open it.  I also had to make a separate ID to run Fender Fuse software as this computer was not recognizing the USB slot where I connect the amp to the laptop.  Fender had me set up another id with minimum items and then I was able to connect to the amp and make changes.
Rose