Yeah that´s what I´m worried about.. I think orginally there were copies of those processes made by the virus, but the antivirus or one of the removal tools hopefully got rid of them. There is more than one "svchost" or whatever it´s called but maybe this is normal? I run the antivirus and the other tools and they don´t find anything, so hopefully it´s all gone. Oh, should the winlogon.exe have an icon like a window with a starry night sky and a moon?
Thanks for ur help!