Several months ago, when TT basic went for updates, it did a DNS lookup, and then updated from various servers (akamai, NTT), and used https, and the only active apps were the TurboTax ones.

Just few days ago I needed to update the forms and things. I got a bit of surprise when svchost wanted out by TCP, to http port on the same servers.
Is the SVCHOST connection reasonable, or is something nefarious going on?

According to their site,

http://turbotax.intuit.com/support/k...irus/1905.html

"TurboTax programs access the Internet via HTTP and HTTPS requests on ports 80 and 443.
TurboTax 2008

Windows
C:\Program Files\TurboTax\version 2008\32bit\TurboTax.exe (where version is Basic, Deluxe, etc.)
C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdater.exe
C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe"

They always want to run their updateService at startup. I don't do it that way - just when needed for few updates when I edit. I mention it, but I don't think it's related.

Message Edited by zasuiteuser on 03-19-2009 11:00 PM