Can anybody identify this item? I haven't been able to find any mention of it anywhere on the web. Iolo System Mechanic identifies it as "Windows xyzhSox2 Server", and it's sitting in C:\WINDOWS\System32

It's malware. I strongly recommend that you follow CastleCops' Malware Removal and Prevention procedure, a system CastleCops devised to enable users to either partially, or fully clean their systems without the direct aid of an expert.

Please read these instructions carefully. You will find the Malware Removal and Prevention Procedure here:

http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction

If that doesn't fix the problem, then go to this Forum, read the instructions at the top of the page carefully:

/f67-Hijackthis_Spyware_Viruses_Worms_Trojans_Oh_My.html

Follow these instructions:

/t102301-Hijackthis_Guidelines_Read_Before_Posting.html

and one of CC's trained 1st Responders or Security Experts will help you.

Note: You must be a CastleCops member to post for help in the HJT forum.

Thanks for the quick and detailed response, but after having spent half the night following the procedure outlined, the offending process still ended up being started at reboot. I finally ended up removing it from the startup using IOLO System Mechanic, then immediately rebooted into safe mode and deleted xyzhSox2.exe from my hard drive. That seems to have done it. The only problem I have now is that my quick launch toolbar won't stay put... it disappears at every reboot. I believe it was CClean that somehow did that to me, and haven't been able to get that fixed yet, though that's really more an annoyance than anything else.

Thanks again!