I checked this out with process viewer. All files were in Windows/ System32 on the boot drive. Child to parent is as follows per Process Explorer: lsass/ winlogon/ smss /system. Everything looks fine except for where this wants to go. The only Chinese program that I use is Maxthon browser and it shouldn't be asking for access on port 500. I've run virus and spyware scans and they came up clean.
Everything that irritates us about others can lead us to an understanding of ourselves. -- Carl Jung
eVGA X58 tri-SLI, i7 930 @ 3.8GHz., Corsair 6GB Dominator, Inno3D GTX470, eVGA260
ASUS P8P67 Pro, i7 2600K @4.60 GHz, 8GB RAM, eVGA GTX 460