Hi Jos

>It could be Windows Update running and checking for updates. What have you got that set to? Auto, download but confirm?...

No just to notify me.

>What about AV updates?

Probably but I have recently updated to the latest version so the patch should not be so big, practically went on for half a day or more, plus the AV does not seem to be in the final list. Plus it was persistent, disable the network card and it stops, enable the card and it is back again.

Had it been a virus/torjan or what have we, could/would it have shown on TCPView?