powerhouse440
2016-12-05, 16:30
I've had lsass.exe, svchost.exe (netsvcs), System and one I can't currently recall requesting the connection. Why is the connection being initiated in the first place? This is the only one of the malware items to persist. I cannot find any reference to it anywhere in my registry or any of the files/services that start with the Operating System. Where does this begin?