>
>I sort of kind of understand what SERVICES.EXE does and that it is part of Win OS. My question is mostly about Why and Who (what program) is trying to connect to the SERVICES from Internet? Is it a legitimate type of "connection" or is it a virus/trojan/spyware is attempting to connect?
>

Dmitry,

If you look closer you'll see that there're also a bunch of trojans and worms that use EXE with the same name.