buckshot2825 wrote:the question now is, how did that virus instal itself while i was at school and not using the internet...
Are you sure it
installed then, and didn't just activate then after previously installing/being installed?
Anyway, this is one reason you should keep close tabs on what applications are allowed to interact with the Internet and when they connect to the Internet. Try Windows7FirewallControl.
Also a good reason to disconnect from the Internet when you're not using it, disable unnecessary Internet-facing services; and block all incoming connections, IGMP, and any ICMP you don't need (echo requests, router solicitations, type 15...).
Using a hardware firewall like some routers is good idea as well.
EDIT Also why not add a taskbar network traffic monitor while you're at it, like
NetWorx, then if something seems 'off' run
Wireshark or similar and see if what's going on is legitimate/expected...
(Note that while running Wireshark, NetWorx will show a small amount of traffic all the time even when there isn't any, some weird interaction between NetWorx & Wireshark I guess...)