Port scanned from Router, DDoSed, Keyboard Lights Flashing

For the last few weeks my internet has been suddenly stopping all the time for around 5 mins, then coming back up, and being generally slow. Today I installed ZoneAlarm, and when my internet stops, the blocked incoming ports would suddenly shoot up, around 60ish everytime my internet would stop, all from different IPs (not 192.168 local IPs, the random online ones), and it would take around 5 mins for the internet to come back up. Aswell as this, I've been recieving packets from my router, 192.168.1.1, but each time on a different port, gradually going up one port at a time, so I think this is a port scan. The same time I started looking into this, my keyboards caps lock light, num lock light, and scroll lock lights would come on at the same time, and off at the same time; looked rather like morse code, and sometimes just really fast flashing, and it would come up with sticky keys messages sometimes even though I wasnt touching the keyboard, and had sticky keys previously disabled. Also once I type things, and press backspace things seem really slow deleting the characters, although I have no idea, I thought maybe this might be caused by a key-stroke logger or something?
So I decided to put 128-bit encyption on, and SSID because there is other wireless networks in the area. Still problems, except no DDosing, the net was still a bit slow, and keyboard lights flashing, though it would sometimes stop for a few hours (hacker getting bored?). So I put avast on, and did a trend micro virus scan, they totalled to finding around 5 virus's hidden in system32 folder, but the problems still persisted.

Any ideas what I should do now? Ive tried Spyware scan, adware scans, nothing.

Edit: My brother who is also on the network, is also having slow internet, but hois Zonealarm isnt detecting any activity.

 

Okay I misread the port scanning thing in zonealarm, the port of the source IP is chaning one by one, but its scanning my pc still to 192.168.1.4:2869 everytime. If I remember correctly, before the last DDoS the port it was destined to was a 6xxx value, so I'm not really sure what it's doing (bearing in mind in not a security genius).

 

Please follow the steps below:

- Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

Make sure you check version numbers and get all updates.

- Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps below:

- Download HijackThis 1.99.1

- Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

- Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

- Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

- Run HijackThis and save your log file.

- Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).