How were the dumps created? Is it true that if you control the firmware, then you control what those dumps look like? If so, then the virus could be sending a decoy image whenever it detects someone's trying to dump the firmware.