Hello, I seem to be having a bit of trouble. I've been using nod32 for 18months without any problems. The trouble is that I keep getting a svchost constantly receiving data from the internet. The PID is either 1216 or 1028. I am using zonealarm free firewall, and the tray icon always shows traffic even at idle, so does the routers activity light. Rebooting the router always fixes the problem for a while, but not for good. I understand 1028 is RPC and 1216 has lots of services, but I need to know whether either of these svchosts can be compromised? as nod32 hasn't found anything even using the deep scan option. Any help or advice would be much appreciated.