10-31-2016, 08:10 AM
Join Date: Oct 2016
OS: Window Vista
I noticed this malware after two weeks of 15 seconds extra boot time. My hard disk spins & beats regularly as if it is loading a big file, right before going into Windows. Then I looked thru Parental Control, and blocked some top-accessed URL at my router, and then it caused my browser to fail to do Amazon check-out, while at other PC, it was fine. Then I knew that something is definitely wrong with this system. Also, before all these, somehow my printer stops working normally. It only prints things out when I restart my computer.
None of virus scanner finds anything. Even Process Explorer returns clean. Then after many rounds of re-installing, re-partition, apparently, either I didn't clean the MBR sufficiently, or the virus has infected my factory-installed recovery partition, or my system back-up disks from 2008 are infected.
This malware doesn't really "reveal itself". My computer is barely slow down once logged in. How do I know for sure that there is something wrong? When I go to download Firefox from IE, right at the end of download, a "Copying " message appears in the same download dialog box from a randomly named directory, and then the final Firefox file size is slightly BIGGER! I compared exactly the same download with another PC, and file size is not right. Then after rounds of windows update, the malware has fixed & improved itself. The "Copying" message no longer appears, but the Firefox file size is still BIGGER.
My system is an old Window Vista. The malware prevents Windows Update to update any new versions of IEs. I had to manually run stand-alone IE update and Service Pack2 update.
I submitted the two different FireFox to McAfee as a new virus found, but I have got no response.
Anyone here likes to take a stab at it? I ran various rootkits scanner as well, and nothing turned up.
I also suspected that my Ubuntu firefox & xterm got infected as well. I've re-installed it since, but before that, when I ran these two programs, there appeared to be a flash of screen or a tiny-split second extra delay. I don't know if I was imagining these, but I noticed that at about the same time when I noticed the 15 seconds extra hard disk spinning going into Windows.
If anybody could give me some suggestions, it is highly appreciated. It is this stealthy & resilient nature of this virus that kind of scares me.