You need to take summat for that cough
Mike.

I know you don't like ZA but I like to control what accesses the net.
It might well be the AV software, but what I'm interested in is a way of finding out what's left running after everything else, other than the shutdown program, has closed, it's really an exercise in computing rather than a problem.