correctumundo. safe mode is going to be your best friend in any situation like this. in sounds like your phantom winsys is a virus or something of the sort but the 'regeneration' is nothing new. viruses almost always have multiple restore points so they can do exactly that but there are a bunch of sources that you can use to combat this. i'm a big fan of regrun (greatis, etc). you can send them a detailed report of your tasks, both visible and background, and if they find something, you can use their reanimator program to essentially make a system restore point where the virus doesnt exist. they also do a scan immediately after the bios loads so the chance of the virus in question hiding in the windows script is 0. good luck man.