hijack this log interpretation please

[buckwheat]

Hi, you've helped me in the past and things are going pretty good.

Is my attached hijackthis log clean?

Thanks in advance for checking!

Steve

 

[VirtualMe]

Seeing as how you don't have a virus program running, go here for a online scan and see if it finds anything. You have a couple of things running in your proccesses that chould indicate a possiable infection.

http://housecall.trendmicro.com/

and/or here

http://www.pandasoftware.com/activescan/

 

[VirtualMe]

These two showing up together is what concerns me. It may be nothing, but needs to be checked.

C:\WINDOWS\System32\wins\DLLHOST.EXE

C:\WINDOWS\System32\wins\svchost.exe


http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

 

[buckwheat]

Hi VM,
I did as you suggested and used the pandasoftward online virus checker.

It DID find and disinfected a worm I think hit me last night, something called ws32\nachia.a for I got a bunch of ms updates that I did not expect. Seemed to fix it ok though. I looked it up and that worm attempts to kill another worm. Wierd what's out there. You get it just be being connected to the internet...

And I found a Concept.A on an old document that virus-cillin had missed last month when I ran it.

Thanks again for your reply, your site is a great help!

Steve C.

 

[VirtualMe]

Glad you got rid of it.

ws32\nachia.a is the same as

W32/Welchia.worm10240 [AhnLab], W32/Nachi.worm [McAfee], WORM_MSBLAST.D [Trend], Lovsan.D [F-Secure], W32/Nachi-A [Sophos], Win32.Nachi.A [CA], Worm.Win32.Welchia [KAV]

Have you updated virus-cillin lately?

If you need a virus program, www.grisoft.com has a free AVG for home users.