Question Author
I was wondering that Jumbuck although I wouldn't know how to find out that info.
chuckfickens - sorry, there are a lot of c:\program files firewall activity but a couple of them are - common files\aol\acs\aoldial.exe, microsoft\search enhancement pack\seaport\seaport.exe, then we have some for dell support centre, itunes, bonjour, norton, system 32 wininit, there are a lot of them. Then we have things like Ip address has disappeared from adaptor Realtek, then blocked communication, connected to shared network, so there is lot of activity that never used to be detected or shown on the firewall activity.