c:\windows\services.exe and port 80

This is not the c:\windows\system32\services that is part the integral part of Win XP. Zonealarm shows c:\windows\services.exe continuosly trying to connect to 207.46.xxx.xxx ((Microsoft addresses)via port 80. I can kill the process and delete services.exe from the drive, but it shows back up even after disabling system restore. I have run Norton, Spybot, TDS3, stinger, etc. I have all MS services(autoupdate, time, etc..) turned off. I initially thought it was Netsky, but no scanner detects it. I have checked the registry run, run once and Run\Services for "services.exe", but can't find it. I can not find how services.exe is starting or what is starting it. I looked in the msconfig for run/load/shell commands in the win.ini/system.ini. I tried writing a batch file using Taskkill, PSkill, process.exe and other similar utils to just kill services.exe on reboot, but they try to kill the valid(system32\services.exe) TASKKILL will let me specify the owner of the process to kill the correct services.exe, but returns a message saying that services.exe is vital and can't be killed, no matter what switch I use. Sorry for the long email, but i want to provide as much info as possible so someone can help. Thanks Bart Please help!!!!!