About two weeks ago, an update to Malwarebytes added an IP address to block, 174.127.96.30, which resolves to a hosting company in UTAH, USA. (Mormon terrorists? ) Exactly what in my system is attempting to 'call out' to this address has puzzled me, and in trying to run it down tried the 'TCPView' program which you suggest in your FAQ, but this program will not run on W2K. Is there some other program that will work on W2K? With absolutely nothing running on a freshly booted machine, it still is trying to 'call out'. Nothing is found after running a full scan on the machine. I have several programs that 'call home' to trigger updates and such, and some may indeed be going through this Utah hosting company. Sill would be nice to know. Is there a way to figure it out with W2K?