[DChronos]

I have a service that I noticed after having a massive problem with svchost making infinite outgoing connections, filling them all with SYN_SENT to microsoft-ds, port 445. I don't have any idea how long this service existed, though.

The service is called "usvzhspzi", has no description or information, but does something with svchost, which is the process that all my connections originated from. Here's a screenshot:


I made a completely detailed post with logs and everything here:
http://forums.techguy.org/malware-re...schco-exe.html

This thing, I am sure, is related to it, but I have no idea what it does, since I didn't even find this until weeks after I 'solved' the problem by crashing the svchost by killing threads in it with process explorer, until my pc crashed. I have no idea how this stopped the infinite outgoing connections, because nothing I tried before, from restarts, to scans, everything, found any virus, and the connections would always start being made within 5 minutes of my pc getting to the desktop. It started after I deleted files detected as some bravix virus, a respawning program in the thread I linked to above. Still have no idea if that was an official program and flase positive, or a real virus. Malwarebytes didn't see it as bad, AVG did over and over again, and there were unauthorized registry entries attempting to be written by it and something else at the same time, detected by spybot.

Anyway, this service was still set to start up after the svchost problem had stopped, and I disabled it later, and didn't see any change in anything after disabling it, so I left it alone, disabled.

Still, though, there's still 0 results in searches (aside from this one, it's the first), and I have no idea what this is.

If you need to look at the logs and stuff, look at the ones I made back when it was running, up above, about svchost, which I suspect is related. There is nothing new on them, only a few things missing, probably, having to do with my sound drivers, since I uninstalled them.

No scans have ever found this problem, not even now. I ended up deleting some things, and I think a few things detected as viruses may not have been, but they were being detected as viruses in the midst of actual viruses way back then, and they got deleted.

Please let me know if you have any idea, or if it's safe to use hijackthis to terminate this process altogether. I don't want to learn it's for something I just happen to not use much after I already killed it.

[Cookiegal]

Closing duplicate.

Please do not start more than one thread for the same problem.