Please Help!

If that’s your solution, then so be it. ;D I understand your frustration.

BTW did Rifkin’s suggestion work?

Negative, I have uninstalled UTorrent, rebooted and the IP is still listening. ???

If you are interested, we can try a scan tool or two an see if we can see anything amiss.

You could also check C:\WINDOWS\system32\dllcache for winlogon.exe and check the file info in it’s properites.

If your copy of UTorrent was infected, uninstalling it would not remove the virus (it had already infected other files). It turns out Avast has it’s own online virus scanner, it is single file scanner, so you can have it scan winlogon.exe directly. It’s http://onlinescan.avast.com.

Here are a few links I use to check for Internet security.

http://www.doxdesk.com/parasite/ (Parasite Detector)
https://www.grc.com/x/ne.dll?bh0bkyd2 (Shields UP! — Internet Vulnerability Profiling)
http://www.grc.com/lt/leaktest.htm (GRC LeakTest – Firewall Leakage Tester)
http://bcheck.scanit.be/bcheck/ (Browser Security Test)
http://www.hashemian.com/tools/whoami.php (Whoami - My IP Address, Browser info, DNS Lookup)