qu about programs connecting to internet / privacy

sometimes i engage the internet lock on zonealarm.
when i do there are a number of programs trying to contact the internet even though i have not pressed on a link or doing anything.

example = firefox/spool subsystem app/generic host process for win 32 services and messenger - which has been 3 times.
I am a little surprised by messenger since i have given it no access rights to the internet nor server rights ( no program has server rights enabled).

why do these programs need to contact the web and who are they contacting?

thanks

on a side note i found - _MSRSTRT.EXE
not-a-virus.tool.reboot
on my computer. I cleaned it using ewido.
tried using net to find out what exactly it is but couldnt find much. anyone have clearer idea ?

 

I couldn't find anything about this virus at all.
I really don't think I can help you much, but hopefully this may: https://www.wilderssecurity.com/showthread.php?t=50662