trojan going thro friends computer to some players help

[legacy-DM_Soldier1]

yo

for a few days now it seams my friends server has been sending out trojans he has scanned and scanned and found nothing

i keep getting wanring from my firewall so has another friend of mine,

i scanned and scanned with my anti virus and found nothing,

then i tryed a online scan and it found it in my windows/system32

i KNOW he is not sending them out,

I had a runin with a player on my friends server that said i was a aimbotter

a nerd and a lowlife

we argud for a some time, then a few days later I saw the same IP so it was him with a diff nick

i talked to him and he said he was drunk i told him he wasnt the only one to blame me for cheating

then he said "Its easyest to tell if there using a aimbot with the rockets"

and i use rockets most the time and the few days before he said i was cheating on dm-geal go-figer

before that he asked me how much bandwith the server had and the isp and my isp i ansered the questns

later that night, the other friend emailed us telling us about the trojan wanring he got, them BAM i got isame warning

so anyway im not 100% sure this player is to blam buts its the onkly person i can think of

i do have his IP and globel ID

is there someway the person sending out the trojan be spoofing thro his server? since the same online scan that picked it up for me dint pick up on his computers

[Frogger]

Soldier, you are running Norton Firewall, right? you can get the ip of the source of the trojan using that. When you get the alert, go to your Firewall log...it will spit out the ip. If it matches, then there you go ..if not...use Symantec Trace Attack (http://security.symantec.com/ssc/vr_main.asp?langid=ie&venid=sym&plfid=23&pkj=GWMXVMHEHPZGAKFLYDI) to find the user. you can then get their ISP etc info and forward the info that way.

[legacy-DM_Soldier1]

ya but :(

its not working right none of that info is coming up

i get the warning but my logs ant working and iv tride there fixes

[Frogger]

if you go to advanced/logs you can't see the incident? it should list ip there.

[legacy-DM_Soldier1]

nothing comes uo in there,

iv tried apl there fixes and stuff and nothing,

mybe its time for me to get the 2003 version :(

[Frogger]

i have had every version since 2000....they have all had the option..reference this..

http://home.earthlink.net/~frogger187/sitebuildercontent/sitebuilderpictures/firewall.jpg

[legacy-DM_Soldier1]

im running 2001 and the logging will not work......

im thinking ofr getting the latest version but its not cheap