BRPlayer, as far as I am aware, svchost is a legit file that controls and runs several Win2K and XP functions. So it's not unusual to find several copies running when you check with TasK Manager. It's not a file you should delete. I can't tell you exactly which functions are being loaded by svchost, you can try searching for it using a search engine and there will be sites with articles on what the file does. More importantly, from your description, it's not so much svchost that is your problem right now, it's the fact that the NT Authority thingie is still plaguing you, which means you have contracted and yet to remove the worm? Checking the earlier pages of this thread should help. Or try Cnet News or eweek for their reports as well, which should contain links to info.