I set svchost.exe to allow and log so i could see where it was going else it would be listed as a windows system application i didn’t just allow all outbound connections and i don’t just set random rules just for the hell of it. It asked for an incoming connection and as i didn’t know why i blocked it, if you are telling me that i should have just allowed it then i don’t think you should be giving advice out on this forum.

essexboy thank you very, very much for your help, much appreciated.