i just looked at your HJT log and I want you to enter your system32 folder and find ctfmon.exe then delete it. if it reappears, it's a virus (I'm pretty sure) also, if you want to test something for me, post the mem usage of those svchost.exe's because I'm getting to think this has to do something with a widespread virus. I had one svchost that used 23000K mem! let me know so I can look into this more. thanks.