Also, I'm seeing that it might just not be for windows update, but another sub program running under that svchost...that is if it's even a real svchost file. I will check tomorrow.