inverted splash virus

In an academic environment there is an automated process to refresh the contents of hard drives to what they are supposed to have on a weekly basis.

I was called becasue a series of computers had a problem afterwards that I was told was a virus that inverted the splash screen, was not detected by McAfee antivirus, and may do other things but is not yet known.

Turns out someone got to the image server and changed out Logo.sys. I showed my boss by loading it up in MS Paint and flipping it back to normal.

AS far as I know there is no inverted splash virus. If you know otherwise please reply and let me know.