Maybe you have my problem.

finally got around to upgrading from Windows 98 (bye bye shiteware!) to 2k Pro. svchost was crashing - hmm not good. I *know* the Windows 98 upgrade works flawlessly - so I immediately suspect something fishy.

Search for svchost.exe - find three versions - one is system32 (OK) one in dllcache (a copy) and one that is too big - in wins. I open it up in my binary editor and scroll down - see the word tftpd - FUCK! I've been blasted! The date on the file was today! What happened - when I upgraded IE and Lookout, it downloaded my mail and one of the 100s of stupid worms that show up in my inbox got thru. No damage, just a pisser.

Lesson - when Windows starts acting screwy, don't assume "it's just fucking Windows!" - it's probably something worse, given the density of malware on the Net.

Look in registry under \\hklm\\system\\currentcontrolset\\services for strange things. RpcTFTP is not good.