I am not sure if this is relevant but last week my pc would not boot, it would post ok then just freeze up you could not even get in to safe mode. I assumed that the boot record was corrupt and tried to fix it using the windows cd and fixmbr option. After a couple of reboots it came up with ntldr is missing and i fixed this after a bit of searching online.
After doing some reading i thought it might be a virus that caused it but none of these scanners found any thing
Ad-Aware 2007
Windows Defender
Spybot - Search & Destroy
SUPERAntiSpyware
AVG Anti-Spyware 7.5
Kaspersky Anti-Virus 7.0
Trend Micro™ HouseCall online scanner
On a recomendation from a post on this forum i tried "a-squared Free" which found a couple of .EXE program files which i have not used for about a year. It did not find anything in my windows folder but found these few in System Volume Information\_restore
a-squared Free - Version 3.0
Last update: 12/10/2007 18:26:06
Scan settings:
Objects: Memory, Traces, Cookies, C:\, D:\
Scan archives: On
Heuristics: On
ADS Scan: On
Scan start: 12/10/2007 18:30:54
C:\System Volume Information\_restore{7FD8ECEC-B6D3-471B-B1ED-D1BBDD8372BE}\RP172\A0420406.exe detected: Riskware.PSWTool.Win32.RAS.a
C:\System Volume Information\_restore{7FD8ECEC-B6D3-471B-B1ED-D1BBDD8372BE}\RP172\A0420663.exe detected: Backdoor.Win32.Ciadoor.13
C:\System Volume Information\_restore{7FD8ECEC-B6D3-471B-B1ED-D1BBDD8372BE}\RP172\A0420667.exe detected: Trojan.Win32.Obfuscated.fk
C:\System Volume Information\_restore{7FD8ECEC-B6D3-471B-B1ED-D1BBDD8372BE}\RP172\A0420669.exe detected: Trojan.Win32.Obfuscated.fk
C:\System Volume Information\_restore{7FD8ECEC-B6D3-471B-B1ED-D1BBDD8372BE}\RP172\A0420672.exe detected: Backdoor.Win32.Ciadoor.13
C:\System Volume Information\_restore{7FD8ECEC-B6D3-471B-B1ED-D1BBDD8372BE}\RP172\A0420734.exe detected: Riskware.Client-IRC.Win32.mIRC.616
C:\System Volume Information\_restore{7FD8ECEC-B6D3-471B-B1ED-D1BBDD8372BE}\RP172\A0421789.exe detected: P2P-Worm.Win32.VB.eg
D:\System Volume Information\_restore{7FD8ECEC-B6D3-471B-B1ED-D1BBDD8372BE}\RP172\A0421945.exe detected: P2P-Worm.Win32.VB.eg
D:\System Volume Information\_restore{7FD8ECEC-B6D3-471B-B1ED-D1BBDD8372BE}\RP175\A0425783.exe detected: Riskware.Client-IRC.Win32.mIRC.616
i deleted them and the rescanned and it was clean.
I have done the prework, could someone please check my logs for any more problems
