To see what applications are connected to the Internet or what applications are using Internet, you can use a small utility by Microsoft Sysinternals called TCPView. This is a small and handy utility which you can download here and run.
When you run the utility it will display all the applications which are connected to Internet. See the image below
Connections which change state from one update to the next are highlighted in yellow; those that are deleted are shown in red, and new endpoints are shown in green.
And don’t worry about SVCHOST.EXE, this is a windows task which keeps running in background and will be displayed in this list several times.
This will give you an idea of what processes are using Internet connection. If you find anything suspicious, search that file and delete it if you think that its something that you have never installed something like that.
Seems like a nice tool, I’ll definitely give it a try. Now the only difficult part is segregating the good ones from the bad.