Run fport. See what is making the connections. Go from there.

Afterwards. Go to Trendmicro Housecall and run a full scan.

Do you have a firewall?