i am using windows xp and i have several files under my running processes that are using 75-100% of my cpu. i've updated and ran norton av and ad-aware but they can't seem to locate the files. i can't locate them manually either. i've had problems like this before but the files were always relatively easy to find and eliminate. most of the time the files were in the c:\windows\system32 folder. the only place i find references to these files is in the c:\windows\prefetch folder, and i've deleted the references there but they keep coming back. the file names include uhug.exe, xwkc.exe, ozkqfxvt.exe, tueb6ry.exe, among others. these files don't seem to be anywhere on my computer other than under my running processes and are referrenced in the prefetch folder. as i said, i have delt with trojans many times so i pretty much know the drill, but it doesn't seem to be working in this case. any help in eliminating these pests would be greatly appreciated.

go to www.trendmicro.com and do a free scan. I have found several viruses with their scan that i couldn't using other UP-TO-DATE software Mike

u might also want to try this claim "best antivirus" if it doesnt find any infections your pretty safe then look toward more along the line of spyware adware malware stuff http://www.nod32.com/home/home.htm goodluck

lilypond Look in c:\program files Is there a folder in there called memorywatcher? Always 2 random named running processes you can't find the associated file for? (they are hidden) Kill one with task manager and a new one starts up right away? Firewall asking if Wowex.exe or Kern32.exe can access internet? Check in the registry :start> run> type regedit> ok. Look under HKEY_LOCAL_MACHINE\Software Is there a subkey there (right near the top) having a 14 random didget number starting with a number between 2-6...eg: 486Y#26709@589 <-this is just an example...it can be anything...but the first number will start from 2 to 6. If so....then you have peper trojan. Uninstaller here: Http://www.memorywatcher.com/uninst.exe Save the uninstaller to disk, run it twice to make sure all the associated files are removed. rebooting between each cleaning. You need to be connected to internet for it to work. If running a firewall it will ask if "uninstaller shim" can access internet...you have to let it. More info here: http://www.mjc1.com/files/peperpage/ ____________________________________ I never give up! Windows Update

yep, i had a peper trojan...but its gone now. thanks for all your help :)

Start/Run...type in msconfig & click on the Startup tab...see what's there

lilypond Glad it worked. You likely have done much of this but some good prevention tips/links here: http://www.spywarewarrior.com/viewtopic.php?t=169 _____________________________________ I never give up! Windows Update