Greeting's :

I am sorry i couldn't reply for 3 day's, I was out of town. Anyway the problem is still there,
some more information that i think i should share,
1. I use original version of all the products.
2. I am not running tow AV's or firewalls

here is what i use :
I use PC-Cillin AV (trial version) (latest ver and def)
Sygate Firewall (paid) (latest ver and def)
and Norton GoBack, Ghost and Partition magic (all paid).

I dont know if my system is 0wned (may be one of you can help me here) I have kept checking all open connection using F-Port 2.0. I get lot of Incoming and Outgoing packets to 10.40.0.1 ?? the application which sends this is "\system32\drivers\ndisuio.sys.

I dont know what should i do all my project work is on the computer if i format and re-install i might loose some work and if i take backup..... I am worried that if my computer is really infected then there is a risk my backup will be same..... any suggestion.