IN zone alarm I'm getting the COM surrogate trying to access the internet !! I've clicked on the more info button and it told me this was from the welchia and nachi worm I have AVG anti virus free edition installed and Zone alarm pro 5 ,running Win xp /w sp2 rc2 I posted a hijack this log for someone to see if they saw anything supicious but it may have been in the wrong forum and was deleted ,,, So If you would like to see it I'll wait for a reply Also running ,spybot adaware , spyware guard ,spyware blaster , I have looked at symantec sight to see what Keys are related to these worms and can't seem to find them ,, I have also visited trend micro housecall online virus scanner and it also came out clean No virus's , My main question is How can I find the virus and allow the anti-virus to clean them ,,, running avg in safe mode produces the same results no virus infections found . Should I be concerned ?? MSI 845e mb 768 mb ram and a p4 2.4n running xp ,win 2000 advanced server and win 98 SE alot to learn and I know so little !!!!

well, so far no Reply! I am wondering if anyone else may know of any other programs ,viruses, trojans , that may use the Com Surrogate as a source for info gathering Can't find any others myself Any help is appreciated... MSI 845e mb 768 mb ram and a p4 2.4n running xp ,win 2000 advanced server and win 98 SE alot to learn and I know so little !!!!

COM Surrogate is not necessarily a worm or virus. It is a legitimate Microsoft file that is used in remote processing. If you recently installed any software that used Com Surrogate, ZA would have asked you to confirm Internet access for it. Does ZA show that COM Surrogate has server rights? If it does then either mark it with the question or deny it. Probably best to question it and see what you're doing if/when it comes up again. With all the protection you have and scans that you did it probably was a legitimate install of some software. BTW visit grc.com and look into the Decombobulater program. GRC is a well known security site. Ed