Posted 25 October 2012 - 07:11 PM
Ok, so everything I know about finding, identifying, and removing viruses and spyware have failed. For the past few days, some very strange behavior has been occurring on several PC's in our network. The problem appears to be spreading and is affecting more PC's and more applications. At first, our Trend Micro Anti-Virus program began finding several cases of the Proactive Fake AV and appeared to be blocking it yet several legit .exe files would be removed from our computers. It was an easy fix; copy back the exe, make sure Trend is up to date, do a scan, and find nothing. Then, the problem started rendering certain PC's useless. All of the same symptoms of a nasty spyware or virus. Internet Explorer not allowing access to Malwarebytes downloads or full system scans would fail to finish. Booting into safe mode and using all of the familiar tools; RKill, ESET, TDSSKiller, GMER, AVG, Trend Micro, Malwarebytes, Rootkit Revealer, etc.., all fail to find any malicious software. I still have a hard time believing there is any sort of infection but I cannot explain the behavior. There are several techs looking into this issue and many of them have believed this to be a virus before me and although I'm still not convinced, I'm becoming concerned. IPCONFIG will not run is the latest, weird, similarity of the, "infected" machines. Anyone had this similar issue or are we losing our minds?