some guy named snixy put on one local forum that many Siol ADSL users have trojan viruses on their ports. He even publish all IP's (later deleted my admin). so I likely have:

5000 Socket23
6883 DeltaSource (DarkStar)

I search some how to remove them, but still no work...

p.s. how do I scan PORTs? to see if this is really true?

& BTW: which personal firewall do U recommend Me?

are you sure that you really have the trojan?
when i use anti-trojan to scan my pc there are always warnings of potential trojans on several ports, but in the faq, they explain that this only means this port could easily infected by one.

you should download antitrojan to check the pc

anti-trojan.net (http://www.anti-trojan.net/en/home.aspx)
they also offer several language packs for download, so you don't have to get along with the german version :)