you can raise the GDI objects up so the warning doesn't popup...
The main thing would be to click on the CPU tab at the top where the real time stat's are displayed.
It *will* show you exactly what is actively hitting the CPU, from highest to lowest moving down the list.
Once you know that, you can highlight the specific task, and in the lower right hand display pain you can click the different tabs to find out more info on that specific task. Also "svchost" info for exactly what tasks is running under svchost is viewable.
If you fear a Trojan, you can look to the top right hand pain and click the "Connections" tab and then click "remote" to see what IP addresses you've a connection with if any and local to see what is actually accessing the Internet (or network)..
Jafo, you're correct about helping and being conservative...
Reason this is my last post on the subject of support...

It can and does it way out of whack when 50 people are saying different things, or repeating the same thing 50 different ways...