a question about an infuriating problem

[dweller]

I guess a bit of background is in order: About a month or 2 ago, i decided to upgrade several software (spybot, adaware, zonealarm) and also i think i was trying to grab an Adobe acrobat version upgrade. Everything worked fine but the Adobe, and it recommended a win2k upgrade that i *think* i started, but killed due to time limitations.
So, afterward checking my zonealarm log (which i do sporadically to see what's happening in there) i notice a constant hit from an isp # that is running through every port on my computer, and then starting over again. Every attempt it makes is blocked by za, but it happens everytime i connect to my isp immediately. Runs through every port, then starts over again. If i disconnect, and reconnect, it picks up where it left off and continues.

So immediately i suspect the za upgrade, and join the forum there to inquire about it... no answer of help, they are stymied as to why. I even uninstalled the za software and went back to the earlier version. Still continues with the port pinging.
Along the way, when i connected to my isp, sometimes i would get a message from another firewall i installed (sygate) that za was trying to connect to the isp that was running thru my ports and did i want to allow the connection? I just click 'No' and the activity continues, which led me to believe it was the upgrade causing the problem. So that made me suspect the za upgrade.

now i'm beginning to suspect it is the win2k upgrade i started, but i have no idea how to check if it is. Here's the conundrum: The activity is being instigated by my computer, or at least that is what the sygate message tells me. My computer is trying to contact the isp, and it's then running through my ports over and over.
At one time, the isp # changed to another (i have run them both through whois, and don't really learn much, Qwest was the first one, changed to Computer Comfort for a day, and then back to Qwest), and since every attempt on my ports is blocked by za, i guess i shouldn't worry, but ...

So, my question is at this point: How do i find out what *on my computer* is trying to establish contact so i can cut this off? All i know is that truevector service (part of za) is trying to connect with the remote isp that is running through each port on my computer, and getting blocked.

But i would like it to stop. Any advice would be appreciated.
Hopefully this makes sense ...
tia
dp

ps. thanks again to the anonymous donor who granted me a star during this holiday season of giving, allowing me to post again in this forum ... :)