Interesting new malware?

I spent 2.5 days last week removing an interesting piece of malware from my machine. Only obvious symptoms of it's presence was a persistent sychost.exe error ("0x75606eb5 at 0x000000080) plus the fact that NO virus removal tools would run, or update, including all MS products, AVG, SB, Malwarebytes....you name it, would not if installed and would not update. Of course Win Update would not work, nor would Defender etc.

It appears to be a variant of the Conflicker B++ . Although the normal registry entries were not there, or not in the typical locations. Also...kind of a strange symptom was that Windows DeFrag would also not run.

Ended up that combofix did the trick. Found two rootkit hacks, but instead of the normal 6-8 character random name chosen by Conflicker A/B it was creating file names of about 20-25 characters to hide itself. The telltale "autorun.inf" files were found in the root directory of all drives.

Also....none of the aforementioned AV programs would run or update in safemode either. I finally found combofix by reading this forum (much thanks to your expertise) it worked, I made a donation to sUBs.

Have no logs to post as I was just trying to power my way through the issue. But has anyone else come across this piece of malware? I contracted it between 3/10 and 3/11. Most likely through a p2p connection. Props to sUBs, he seems to be able to do things that giant software companies can't.
JohnnyB

 

Combofix log below.
Couple of days since combofix got rid of the malware, so far so good. No anomalous behavior from the machine.

Note the long string, random characters generated to save the files in the system32 and system32/drivers directories.
And autorun.inf in the roots of all 3 harddrives.

Thanks agian for the help.
JohnnyB

 

Yep...I found Vundo after another scan or two. Seems I've got that cleared up. Ended up restoring a backup copy of the primary drive and doing all the scanning again, everything seems clean.
Sorry about the log post. Figured I should have attached it.
What's your opinion of the MS online scan tool? Seems pretty deep, found a couple of minor issues that some of the others missed.
JohnnyB