whyme961,

First do a trojan/worm scan with the updated virus list. In XP most instances occurs while svchost.exe is running many instances in the PROCESS. It mostly implies presence of W32@ worms. Check it out. Try STRINGER from VIL. It does a clean sweep for the same. Maybe if you are in LAN, viruses/worms/trojans might have been infected via the ports mainly 135/139. ZA has a tendency to be killed easily if the system is trojan infected ( its my personal experience ).ANd also as suggested above by fellow members, disable SHARINGS. If all the above fails, it might be someone known to you who has access (physical ) to your computer deleting the files.....lol...

HTH!!!!

!!(( Protocols )) !!