network activity

Hi

I can see some strange activity between my PC and Internet for last 2-3 days. This is alway port 1224 and svchost process. I dont know why but my computer downloads and sends relatively big volumes of data. I assume this is not windows update because this think persist even I disable automatic updates.I am using CIS5 on Acer Veriton+Win XP Prof.SP3. Possible infection?

John

try to use some online scanners

Regards,
Valentin

Can you post a screenshot of the firewall logs? They are under Firewall → View Firewall Events.

Behind the name svchost.exe there is a number. That is the Process ID (PID). Please cross reference this PID with the same PID in View Active Processes List. When you found it click right and choose the look up the path. Can you tell us in what folder svchost.exe is?