You must remember it is normal that the svchost connects to the Internet. It depense which services you have started

Ok but is it normal that svchost and spoolsv services always connect to the web at windows startup and wants to act as local and server services?!