I'm getting some message every 15 minutes from my firewall saying "system" outgoing to 220.127.116.11 local area connection 5 protocol 41 I wrote to Earthlink about the I.P. and it is still active. I have run NOD32 deep scan and nothing was found. I ran Spybot and Adaware and Windows Defender 2 and nothing was found. How can I get rid of this [trojan?]? I can't find it. Does NOD32 detect/remove root kits?