Hmm, from what you said, I seem to get the impression that you think you're infected by Sub7. Just because someone is scanning your PC at the port where Sub7 is supposed to function doesn't mean that...