Someone, have no idea who, really worked my computer, and placed some rootkit, all-knowing, all-smashing malware something and I simply cannot keep Windows OS clean in a multiboot configuration with Ubuntu even after removing MBR, deleted all partitions and partition table, and reinstalled Ubuntu with Grub only, and no MBR.
The symptoms are, for the Windows part, that group policy rules are changed soon after establishing the internet connection and reboot computer. Local System is replaced by either SYSTEM and/or SERVICE and I can no longer find Local System when trying to restore the defaults, and it goes on like this with other locations/services, and I also find a lot of unknown executables inside the windows root folder, and system32 also with only one or two reboots after a fresh install of windows. When trying to install antivirus software I experience some delays, and only the firewall is able to block part of the unusual network activity.
Several attempts to reinstall Windows after installing Ubuntu were pathetic, I always seemed to get stuck to some point where the ugly malware rootkit something showed up and started doing its business as usual. I feel like being haunted and have no idea what to do or whether this nasty pirate is able to track me, and somehow infect my system again.
On top of all these, I recently noticed BIOS not being able to set time precisely, it is always a few hours backward. Is there anything I can do to erase this malware or to prevent further attacks? I've tried them all, antimalware, antivirus, antipirate software, and with very few results. I was thinking to delete all data on hard disk again, format and delete new MBR left from previous windows installs, and start it over using some Ubuntu Live Cd. Or maybe change my hard disk or what?
This is a new entry in my post as requested by user @mgjk who asked me to describe my problem with more details
As requested by @mgjk in his reply, I have to describe my problem using more details, and to be specific I think it is mostly about a virus described on this page, a virus/malware known as Trojan:Win32/Spyeye which may be, among others, related somehow to
Systray .exe stub file usually located in
/windows/system32. They say most AV software won't detect it, and I did try many solutions to eliminate it with no results.
I usually run WinXP, it is compatible with my ancient Dell machine. As for the specific symptoms, I sometimes could not have access to right-click menu commands in Windows, they were present but did not activate, or the taskbar did not show any of the open windows/apps, instead they were present on top of taskbar as if they were shrinked, and when it got really ugly I could not have access to most usual commands like stopping a process in Task Manager, using Regedit or editing system rules and policy using Gpedit.msc tool.
As already told in a previous comment, my ISP told me to install Kaspersky AV, latest release, and after first reboot I got yet another thingy on my Windows, which is known as
das boot virus or something like that. Great idea, what can I tell, use Kaspersky to get rid of Spyeye. I should have known better.