trojanmana

Members
  • Content Count

    24
  • Joined

  • Last visited

Community Reputation

0 Neutral

About trojanmana

  • Rank
    Member
  1. my advanced system optimizer is finding infections. [color="10478a"][b]trojan-backdoor.bifrose[/b][/color][color="c00a0a"] (Backdoor[/color]) [b][color="10478a"]Status [/color][/b]: Quarantined [b]Infected registry keys/values detected[/b] hkey_current_user\software\wget [color="10478a"][b]trojan-spy.banker[/b][/color][color="c00a0a"] (Trojan Spy[/color]) [b][color="10478a"]Status [/color][/b]: Quarantined [b]Infected registry keys/values detected[/b] hkey_local_machine\system\currentcontrolset\services\catchme hkey_local_machine\system\currentcontrolset\services\catchme!type hkey_local_machine\system\currentcontrolset\services\catchme!errorcontrol hkey_local_machine\system\currentcontrolset\services\catchme!start hkey_local_machine\system\currentcontrolset\services\catchme!imagepath hkey_local_machine\system\currentcontrolset\services\catchme!group [color="10478a"][b]monitoring.employees-pc-monitor[/b][/color][color="c00a0a"] (Monitoring Tool[/color]) [b][color="10478a"]Status [/color][/b]: Quarantined [b]Infected registry keys/values detected[/b] hkey_users\s-1-5-18\software\microsoft\windows\currentversion\policies\system [color="10478a"][b]trojan.downloader[/b][/color][color="c00a0a"] (Trojan[/color]) [b][color="10478a"]Status [/color][/b]: Quarantined [b]Infected files detected[/b] [b]FileName: [/b]c:\windows\erdnt\cache64\winlogon.exe [b]MD5: [/b]1151b1baa6f350b1db6598e0fea7c457[b](390656 Bytes)[/b] [b]Signature[/b]
  2. it was able to finish and didnt find anything. ill run it again.
  3. hi, i am sitll having issues. internet explorer is starting by itself. also when i click links it takes me to random sites.
  4. please seee attached log for eset- very small log for some reason
  5. . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] AppInit_DLLs=c:\progra~2\KASPER~1\KASPER~2\mzvkbd3.dll c:\progra~2\KASPER~1\KASPER~2\sbhook.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] aux=wdmaud.drv . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager] BootExecute REG_MULTI_SZ autocheck . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-] TkBellExe="c:\program files (x86)\Common Files\Real\Update_OB\realsched.exe" -osboot Adobe Reader Speed Launcher="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" Adobe ARM="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" QuickTime Task="c:\program files (x86)\QuickTime\QTTask.exe" -atboottime iTunesHelper="c:\program files (x86)\iTunes\iTunesHelper.exe" . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus] DisableMonitoring=dword:00000001 . R2 ASO3DiskOptimizer;ASO3DiskOptimizer;c:\program files (x86)\Advanced System Optimizer 3\ASO3DefragSrv64.exe [2011-11-10 263480] R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-07-20 136176] R3 gupdatem;Google Update Service (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-07-20 136176] R3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys [x] R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files (x86)\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 31125880] R3 Point64;Microsoft IntelliPoint Filter Driver;c:\windows\system32\DRIVERS\point64.sys [x] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x] R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x] R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x] R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x] R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x] R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x] S0 viamrx64;viamrx64;c:\windows\system32\DRIVERS\viamrx64.sys [x] S0 videX64;videX64;c:\windows\system32\DRIVERS\videX64.sys [x] S1 kl2;kl2;c:\windows\system32\DRIVERS\kl2.sys [x] S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys [x] S3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-10 4925184] S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [x] . . --- Other Services/Drivers In Memory --- . *NewlyCreated* - ASWMBR *Deregistered* - aswMBR . Contents of the 'Scheduled Tasks' folder . 2011-11-16 c:\windows\Tasks\ASO-AutoCheckUpdate7Days.job - c:\program files (x86)\Advanced System Optimizer 3\CheckUpdate.exe [2011-11-16 00:08] . 2011-11-15 c:\windows\Tasks\Google Software Updater.job - c:\program files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2010-07-20 14:51] . 2011-11-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-07-20 22:58] . 2011-11-16 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-07-20 22:58] . 2011-11-16 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1159727113-3215902153-4262205293-1000Core.job - c:\users\trojan\AppData\Local\Google\Update\GoogleUpdate.exe [2010-07-20 22:47]
  6. ComboFix 11-11-15.06 - trojan 11/15/2011 23:43:05.1.1 - x64 Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.1023.431 [GMT -8:00] Running from: c:\users\trojan\Desktop\ComboFix.exe AV: Kaspersky Internet Security *Disabled/Updated* {56547CC9-C9B2-849D-8FEF-A496150D6A06} FW: Kaspersky Internet Security *Disabled* {6E6FFDEC-83DD-85C5-A4B0-0DA3EBDE2D7D} SP: Kaspersky Internet Security *Disabled/Updated* {ED359D2D-EF88-8B13-B55F-9FE46E8A20BB} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . ((((((((((((((((((((((((( Files Created from 2011-10-16 to 2011-11-16 ))))))))))))))))))))))))))))))) . . 2011-11-16 08:15 . 2011-11-16 08:15 -------- d-----w- c:\users\postgres\AppData\Local\temp 2011-11-16 08:15 . 2011-11-16 08:15 -------- d-----w- c:\users\Default\AppData\Local\temp 2011-11-16 04:12 . 2011-11-10 00:09 18744 ----a-w- c:\windows\system32\roboot64.exe 2011-11-16 04:12 . 2010-10-06 20:25 16896 ----a-w- c:\windows\system32\sasnative64.exe 2011-11-16 04:11 . 2011-11-16 04:12 -------- d-----w- c:\program files (x86)\Advanced System Optimizer 3 2011-11-15 03:26 . 2011-11-15 03:26 69000 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{5DB27C78-721E-47DF-A058-E2AF26913B90}\offreg.dll 2011-11-14 03:35 . 2011-11-14 03:34 55384 ----a-w- c:\windows\system32\drivers\SBREDrv.sys 2011-11-14 03:28 . 2011-11-15 03:10 -------- d-----w- c:\programdata\Lavasoft 2011-11-14 03:17 . 2011-11-14 03:17 388096 ----a-r- c:\users\trojan\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2011-11-14 03:17 . 2011-11-14 03:17 -------- d-----w- c:\program files (x86)\Trend Micro 2011-11-12 07:46 . 2011-11-12 07:47 -------- d-----w- c:\program files\CCleaner 2011-11-12 07:44 . 2011-11-14 02:46 -------- d-----w- c:\program files (x86)\Spybot - Search & Destroy 2011-11-12 07:44 . 2011-11-14 02:46 -------- d-----w- c:\programdata\Spybot - Search & Destroy 2011-11-12 07:42 . 2011-11-14 15:22 -------- d-----w- c:\program files\SUPERAntiSpyware 2011-11-11 12:02 . 2011-10-07 04:16 8570192 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{5DB27C78-721E-47DF-A058-E2AF26913B90}\mpengine.dll 2011-11-09 21:29 . 2011-10-01 05:45 886784 ----a-w- c:\program files\Common Files\System\wab32.dll 2011-11-09 21:29 . 2011-10-01 04:37 708608 ----a-w- c:\program files (x86)\Common Files\System\wab32.dll 2011-11-09 21:29 . 2011-09-29 16:29 1923952 ----a-w- c:\windows\system32\drivers\tcpip.sys 2011-11-09 21:29 . 2011-09-29 04:03 3144704 ----a-w- c:\windows\system32\win32k.sys 2011-11-06 09:44 . 2011-11-10 03:25 -------- d-----w- c:\program files (x86)\Seagate 2011-11-06 09:10 . 2011-11-10 03:25 -------- d-----w- c:\programdata\PCPitstop 2011-11-06 08:35 . 2011-11-06 08:36 -------- d-----w- c:\users\trojan\AppData\Roaming\QuickScan 2011-11-04 05:46 . 2011-11-04 05:46 -------- d-----w- c:\users\trojan\AppData\Local\AIM Toolbar 2011-10-18 10:06 . 2011-10-18 10:06 -------- d-----w- c:\users\Default\AppData\Local\Microsoft Help . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-11-14 00:53 . 2010-08-09 01:10 1664 ----a-w- c:\windows\system32\ASOROSet.bin 2011-10-01 03:25 . 2011-10-12 13:58 1638912 ----a-w- c:\windows\system32\mshtml.tlb 2011-10-01 02:42 . 2011-10-12 13:58 1638912 ----a-w- c:\windows\SysWow64\mshtml.tlb 2011-08-31 06:05 . 2011-08-31 06:05 96104 ----a-w- c:\windows\system32\dns-sd.exe 2011-08-31 06:05 . 2011-08-31 06:05 85864 ----a-w- c:\windows\system32\dnssd.dll 2011-08-31 06:05 . 2011-08-31 06:05 83816 ----a-w- c:\windows\SysWow64\dns-sd.exe 2011-08-31 06:05 . 2011-08-31 06:05 73064 ----a-w- c:\windows\SysWow64\dnssd.dll 2011-08-27 05:37 . 2011-10-12 13:57 861696 ----a-w- c:\windows\system32\oleaut32.dll 2011-08-27 05:37 . 2011-10-12 13:57 331776 ----a-w- c:\windows\system32\oleacc.dll 2011-08-27 04:26 . 2011-10-12 13:57 233472 ----a-w- c:\windows\SysWow64\oleacc.dll 2011-08-27 04:26 . 2011-10-12 13:57 571904 ----a-w- c:\windows\SysWow64\oleaut32.dll 2011-08-20 05:37 . 2011-10-12 13:59 1188864 ----a-w- c:\windows\system32\wininet.dll 2011-08-20 04:31 . 2011-10-12 13:59 981504 ----a-w- c:\windows\SysWow64\wininet.dll . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\MSSOverlay] @="{b75ab0c8-03d5-4592-9821-a48d54d66b14}" [HKEY_CLASSES_ROOT\CLSID\{b75ab0c8-03d5-4592-9821-a48d54d66b14}] 8/26/2005 17:31 57344 ----a-w- c:\windows\System32\MssShellExt.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] msnmsgr="c:\program files (x86)\Windows Live\Messenger\msnmsgr.exe" [2010-04-17 3872080] MusicManager="c:\users\trojan\AppData\Local\Programs\Google\MusicManager\MusicManager.exe" [2011-06-15 12817920] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] mxomssmenu="c:\program files (x86)\Maxtor\OneTouch Status\maxmenumgr.exe" [2005-10-06 57344] mssSort="c:\program files (x86)\Maxtor\Maxtor Quick Start\msssort.exe" [2005-07-15 1335296] AppleSyncNotifier="c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2011-09-27 59240] BCSSync="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520] AVP="c:\program files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe" [2010-12-11 352976] APSDaemon="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-09-27 59240] iTunesHelper="c:\program files (x86)\iTunes\iTunesHelper.exe" [2011-10-10 421736] Adobe Reader Speed Launcher="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-09-07 37296] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] ConsentPromptBehaviorAdmin= 0 (0x0) ConsentPromptBehaviorUser= 3 (0x3) EnableUIADesktopToggle= 0 (0x0) PromptOnSecureDesktop= 0 (0x0) . [HKEY_L
  7. aswMBR version 0.9.8.986 Copyright(c) 2011 AVAST Software Run date: 2011-11-15 22:32:10 ----------------------------- 22:32:10.471 OS Version: Windows x64 6.1.7601 Service Pack 1 22:32:10.471 Number of processors: 1 586 0xC00 22:32:10.471 ComputerName: TROJAN-PC UserName: trojan 22:32:17.208 Initialize success 22:32:43.335 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\0000005a 22:32:43.351 Disk 0 Vendor: WDC_WD16 02.0 Size: 152627MB BusType: 8 22:32:45.367 Disk 0 MBR read successfully 22:32:45.370 Disk 0 MBR scan 22:32:45.374 Disk 0 Windows 7 default MBR code 22:32:45.377 Service scanning 22:32:46.885 Service kl1 C:\Windows\system32\DRIVERS\kl1.sys **LOCKED** 5 22:32:46.890 Service kl2 C:\Windows\system32\DRIVERS\kl2.sys **LOCKED** 5 22:32:46.896 Service KLIM6 C:\Windows\system32\DRIVERS\klim6.sys **LOCKED** 5 22:32:46.928 Service klmouflt C:\Windows\system32\DRIVERS\klmouflt.sys **LOCKED** 5 22:32:48.478 Modules scanning 22:32:48.485 Disk 0 trace - called modules: 22:32:48.501 ntoskrnl.exe CLASSPNP.SYS disk.sys >>UNKNOWN [0xfffffa80021e7334]<< 22:32:48.506 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa80021ba790] 22:32:48.515 3 CLASSPNP.SYS[fffff8800160143f] -> nt!IofCallDriver -> \Device\0000005a[0xfffffa80017379c0] 22:32:48.524 \Driver\viamrx64[0xfffffa800172c7f0] -> IRP_MJ_INTERNAL_DEVICE_CONTROL -> 0xfffffa80021e7334 22:32:48.531 Scan finished successfully 22:33:36.544 Disk 0 MBR has been saved successfully to "\\MAXTORDRIVE\Videos\MBR.dat" 22:33:36.560 The log file has been saved successfully to "\\MAXTORDRIVE\Videos\aswMBR.txt"
  8. . UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_2011-09-30.01) . Microsoft Windows 7 Ultimate Boot Device: \Device\HarddiskVolume1 Install Date: 7/20/2010 3:15:17 PM System Uptime: 11/14/2011 7:21:42 PM (24 hours ago) . Motherboard: ASUSTeK Computer Inc. | | K8VSEDX Processor: AMD Athlon(tm) 64 Processor 3400+ | Socket 754 | 2403/200mhz . ==== Disk Partitions ========================= . A: is Removable C: is FIXED (NTFS) - 149 GiB total, 94.351 GiB free. D: is CDROM (UDF) . ==== Disabled Device Manager Items ============= . Class GUID: Description: RAID Controller Device ID: PCI\VEN_105A&DEV_3373&SUBSYS_80F51043&REV_02\3&267A616A&0&40 Manufacturer: Name: RAID Controller PNP Device ID: PCI\VEN_105A&DEV_3373&SUBSYS_80F51043&REV_02\3&267A616A&0&40 Service: . ==== System Restore Points =================== . RP217: 11/9/2011 7:38:14 PM - Windows Update RP218: 11/11/2011 3:00:37 AM - Windows Update RP219: 11/11/2011 11:24:42 PM - Removed Windows Media Player Firefox Plugin RP220: 11/13/2011 4:33:32 PM - Advanced System Optimizer - First Install RP221: 11/13/2011 6:28:24 PM - Advanced System Optimizer - System Protector 11/13/2011 6:28:13 PM RP222: 11/13/2011 7:15:46 PM - Installed HiJackThis RP223: 11/13/2011 7:25:17 PM - Installed Ad-Aware RP224: 11/13/2011 7:27:05 PM - Installed Ad-Aware RP225: 11/14/2011 6:22:53 PM - Advanced System Optimizer RP226: 11/14/2011 7:07:33 PM - Removed Ad-Aware . ==== Installed Programs ====================== . Adobe AIR Adobe Flash Player 10 ActiveX Adobe Flash Player 10 Plugin Adobe Reader 9.4.6 AIM 7 AOL Messaging Toolbar Apple Application Support Apple Mobile Device Support Apple Software Update BitLord 1.1 Bonjour CCleaner Definition update for Microsoft Office 2010 (KB982726) 32-Bit Edition Download Updater (AOL LLC) Google Chrome Google Update Helper Google Updater HiJackThis iCloud iTunes Java Auto Updater Java(TM) 6 Update 23 Kaspersky Internet Security 2011 Lexmark 810 Series Maxtor Quick Start Microsoft .NET Framework 1.1 Microsoft .NET Framework 4 Client Profile Microsoft Application Error Reporting Microsoft Choice Guard Microsoft IntelliPoint 8.0 Microsoft Office 2010 Service Pack 1 (SP1) Microsoft Office Access MUI (English) 2010 Microsoft Office Access Setup Metadata MUI (English) 2010 Microsoft Office Excel MUI (English) 2010 Microsoft Office Groove MUI (English) 2010 Microsoft Office InfoPath MUI (English) 2010 Microsoft Office Office 64-bit Components 2010 Microsoft Office OneNote MUI (English) 2010 Microsoft Office Outlook MUI (English) 2010 Microsoft Office PowerPoint MUI (English) 2010 Microsoft Office Professional Plus 2010 Microsoft Office Proof (English) 2010 Microsoft Office Proof (French) 2010 Microsoft Office Proof (Spanish) 2010 Microsoft Office Proofing (English) 2010 Microsoft Office Publisher MUI (English) 2010 Microsoft Office Shared 64-bit MUI (English) 2010 Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010 Microsoft Office Shared MUI (English) 2010 Microsoft Office Shared Setup Metadata MUI (English) 2010 Microsoft Office Word MUI (English) 2010 Microsoft Silverlight Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 MobileMe Control Panel Mozilla Firefox 8.0 (x86 en-US) MSVCRT Music Manager NVIDIA Drivers Octoshape add-in for Adobe Flash Player PerformanceTest v7.0 PerformanceTest v7.0 (64-bit) Picasa 3 PVSonyDll QuickTime Safari Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708) Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636) Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078) Security Update for Microsoft Excel 2010 (KB2553070) Security Update for Microsoft Office 2010 (KB2553091) Security Update for Microsoft Office 2010 (KB2553096) Security Update for Microsoft SharePoint Workspace 2010 (KB2566445) Update for Microsoft Office 2010 (KB2494150) Update for Microsoft Office 2010 (KB2553065) Update for Microsoft Office 2010 (KB2553092) Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition Update for Microsoft Office 2010 (KB2553455) 32-Bit Edition Update for Microsoft Office 2010 (KB2566458) Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition Update for Microsoft Outlook 2010 (KB2553323) 32-Bit Edition Update for Microsoft Outlook Social Connector (KB2583935) VLC media player 1.1.7 Windows Live Call Windows Live Communications Platform Windows Live Essentials Windows Live Family Safety Windows Live Messenger Windows Live Sign-in Assistant Windows Live Upload Tool Windows Media Player Firefox Plugin WinRAR archiver . ==== Event Viewer Messages From Past Week ======== . 11/9/2011 1:45:44 PM, Error: volsnap [36] - The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit. 11/14/2011 7:42:47 PM, Error: Ntfs [55] - The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume . 11/14/2011 7:24:37 PM, Error: Service Control Manager [7001] - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. 11/14/2011 7:21:55 PM, Error: volmgr [46] - Crash dump initialization failed! 11/14/2011 7:21:51 PM, Error: Microsoft-Windows-Kernel-Processor-Power [6] - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware. 11/14/2011 7:19:04 PM, Error: Service Control