If you're running Win2000, WinXP or WinNT, pull up the process viewer and see what you're running. Check for any odd-named processes, or any double processes. Double processes are most likely something that shouldn't be there. Another idea might be to connect to your open ports with Telnet from win98, but I'm not sure how many trojans this works with...