KAV 4.5 and "WINHOST.EXE"

I still use KAV 4.5 as an on demand scanner at a PC used mainly for
gaming from my son.
I saw a process Winhost.exe in Task Manager and from safe mode
after removing these (and some more) entries

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows NetConfig"="WINHOST.EXE"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Windows NetConfig"="WINHOST.EXE"

[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\WINDOWS\\system32\\winhost.exe"="winhost"

I was able to delete three files in System32 directory which I,m sure
there were some malware

http://www.viruslist.com/en/find?words=winhost.exe

My KAV (up to date - ext databases) scanned the file Winhost.exe
and found it clean.
Unfortunately I didn't keep the file to submit it.

Do you think that my outdated version of KAV has something to do with this ?

 

that's hard to say it could be a new variant of something. but again, your kav is outdated, you should consider installing a newer version.

 

kav6.0 is light and can be used an and ondemand scanner only
it should be a free upgrade
lodore

 

I tried two-three times newer KAV versions and NOD32
and always come back to 4.5.
Maybe it's time to try their latest versions or Antivir ....

 

i never understand why people would use older versions, if a free upgrade is available.

 

Is KAV 4.5 completely outdated? If it's updating with the extended database, I would imagine that it would be worth having as an on demand scanner for XP. Detections couldn't be that much different from v. 6.xx as far as viruses/malware are concerned.

 

For some reason (different for everyone of them) they find older versions
more convenient or user friendly or they just like them more than newer ones
but...you're never sure everything is all right

 

i can 'kinda' see what you are trying to say, but i feel the purpose of an AV is protection, and you will get it better from the newer versions.