hijack this log interpretation please

Hi, you've helped me in the past and things are going pretty good.

Is my attached hijackthis log clean?

Thanks in advance for checking!

Steve

 

Seeing as how you don't have a virus program running, go here for a online scan and see if it finds anything. You have a couple of things running in your proccesses that chould indicate a possiable infection.

http://housecall.trendmicro.com/

and/or here

http://www.pandasoftware.com/activescan/

 

These two showing up together is what concerns me. It may be nothing, but needs to be checked.

C:\WINDOWS\System32\wins\DLLHOST.EXE

C:\WINDOWS\System32\wins\svchost.exe


http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

 

Hi VM,
I did as you suggested and used the pandasoftward online virus checker.

It DID find and disinfected a worm I think hit me last night, something called ws32\nachia.a for I got a bunch of ms updates that I did not expect. Seemed to fix it ok though. I looked it up and that worm attempts to kill another worm. Wierd what's out there. You get it just be being connected to the internet...

And I found a Concept.A on an old document that virus-cillin had missed last month when I ran it.

Thanks again for your reply, your site is a great help!

Steve C.

 

Glad you got rid of it.

ws32\nachia.a is the same as

W32/Welchia.worm10240 [AhnLab], W32/Nachi.worm [McAfee], WORM_MSBLAST.D [Trend], Lovsan.D [F-Secure], W32/Nachi-A [Sophos], Win32.Nachi.A [CA], Worm.Win32.Welchia [KAV]

Have you updated virus-cillin lately?

If you need a virus program, www.grisoft.com has a free AVG for home users.