I am opening this up for discussion. Here's the scenerio. I have a Gigabyte m/b with the JMB336X chipset. Sometime ago I had downloaded the latest Win 7 x64 drivers from the JMIcron site in Taiwan. Verified drivers were Microsoft certified. After the latest WIN updates, restarted my PC to apply updates. Shortly thereafter checked my NIS 2013 firewall logs. Was surprised to see events in the log immediately after boot that a IE9 connection was established that I did not initiate. Immediately therafter was an outbound ftp connection by searchprotocolhost.exe to IP address 184.108.40.206. That IP is registered to JMicron in Taiwan. I was "floored" to see that NIS actually blocked the 6 connection attempts. I have researched this and can find no reason why searchprotocolhost.exe should be dialing out via ftp. I changed the firewall rule NIS created to restrict searchprotocolhost.exe to my local subnet. I also added a rule to block any other traffic from it. Have seen no further entries in the firewall log since related to searchprotocolhost.exe. Anyone have the slightest idea what the ftp connection via searchprotocolhost.exe was about? I am at this point inclined to strongly beleive this connection was initiated by the SMB33X controller driver.