Thanks for all your help so far, but this computer is still infected with the same things. Norton 360 is still blocking intrusion attempts by localhost (127.0.0.1, 43227), IPS Alert Name: (System infected: Trojan.Powelik Activity), Attacker URL: fff5eee.com. And High Memory Usage by COM Surrogate. Also Malwarebytes Anti-Malware continues to have several popups showing malicious websites being blocked (Type: Outbound), including; fff5ee.com searchnet.blinkxcore.com toolbarliz ? Some with IP address numbers, but no domain names Please tell me there's something you can do to help. B