virus problems

[Andrew]

So I normally have clamwin.

Clamwin found virus.png on March 7.

Then I ran it again and it found virus1.png on March 8

March 13 it found virus111.png

I was never able to find Vistaultm.dll even though clamwin said it sent it to quarantine.

So this was getting suspicious so I installed Antivir. It found a virus or two about 5 days ago when I scanned (I remember saying there was a virus in the system restore as well, so I turned off system restore to delete all those files). I ran Antivir again today and it found virusantivir.png

I have no idea where all these supposed viruses are coming from. Looks like I am going to have to install another antivirus program (so have 3 running).

I cannot find any information on these viruses listed. And I am not noticing anything weird with the normal operation of my computer, nor anything suspicious with firewall.

I won't be formatting until end of April first of May when new ubuntu is released.

Guess I shouldn't do any banking or anything under windows.

[Dunenewt]

]Looks like somehow you got a Trojan Horse, and it is letting in all these other viruses.  As  long as you've got rid of the Trojan Horse, that should stop the rest of them, but indeed it is worrying.  What anti-viruses are you running?  I've got AVG on mine, but if something goes seriously wrong I do have LinuxDefender, to save the day.

[Andrew]

I run Clamwin antivirus.

I installed Avira Antivir and it found more viruses. Then I ran it again and it found more.

[Dunenewt]

Nasty stuff.  How often do you use Windows?

[Andrew]

Everyday :)

I dual boot with ubuntu. Once the new version is released in april, I will probably use it more. I'm testing the testing version to make sure everything works in this release (video resolution and other previous problems I've had).

[Dunenewt]

I just looked it up, and this trojan gets your passwords from IE apparently.

[Andrew]

According to Trojan.Spy.Banker.HQ

there is supposed to be registry setting. I don't see it, so I must not have it currently.

[Andrew]

So I switched back to clamwin again. I ran a scan after installing it and it found nothing. Now about a week or two later I ran a scan and it found spyware.

C:WINDOWSmeta4.exe: Trojan.Hijacker.Qhost FOUND

Created: February 29, 2008, 4:38:36 PM

Modified: April 12, 2006, 9:47:22 AM

Apparently I got this from installing SUPER video converter. Which is odd because the video converter is great and did not install spyware the first time.

Google found some info on it here and other places say it is an mp3 tagger and some other stuff.

I deleted meta4.exe hopefully that will fix the problem.

EDIT: Apparently it is not a virus, just a false positive from clamwin. Out of 20 other antivirus programs none identified it.