Question: I've just setup TDS as per Fanj's advice, upon rescan of my system the following files came up as being detected: C:\windows\system32\smss.exe C:\windows\system32 srss.exe C:\windows\system32\winlogon.exe C:\windows\system32\services.exe C:\windows\system32\lsass.exe C:\windows\system32\svchost.exe C:\windows\system32\spoolsv.exe C:\windows\system32\explorer.exe C:\program files ommon files\microsoft shared\vs7debug\mdm.exe C:\windows\system32\nod32cc.exe C:\windows\soundman.exe C:\program files\eset\amon.exe C:\program files\eset\pop3scan.exe C:\program files\winamp3\winampa.exe C:\windows\system32 tfmon.exe C:\program files\ostat\ostat.exe C:\ program files\zone labs\zonealarm.exe C:\ program files\file-ex 3\fileex.exe C:\ program files\replicator\ptreplicator.exe C:\windows\system32\nod32m2.exe C:\windows\system32\nvsvc32.exe C:\windows\system32\zonelabs\vsmon.exe C:\ prog~1\greatis\regrun~1\watchdog.exe C:\ program files\icqlite\icqlite.exe C:\documents and settings raig\desktop\bigpond.exe C:\ program files\internet explorer\iexplore.exe C:\windows\msagent\agentsvr.exe I have added these to my "Exclude" list after looking at each file. Does this only exclude the particular file or the entire folder, as in the entire "System32" folder instead of just "System32\smss.exe" I wouldn't have thought so, but worth the ask 2nd Question is: C:\windows\system32\svchost.exe constantly tries to act as a server, I have blocked this with ZoneAlarm, without any negative affects being noticeable. Any ideas as to why this is trying to be a server and for what purpose? I have always had the understanding that next to nothing should be a server. The only things I have are my ISP - Bigpond, ICQ, Messenger and Pop3 Scanner. Cheers.