|
Hm,
If it's signed and it behaves like a virus, it might be that the signature of Baidu is compromised, but that doesn't sound real to me. Maybe you used a cracked winxp with some rootkit inside?
Take a look at GMER: http://www.gmer.net/ maybe you find some suspicous ssdt hooks or something.
Greetings
|