[Twinny]

Trojans normally try and disable Anti virus/firewalls by killing the process and corrupting the files. And yes, they can advertise an ip address. The great thing about NAT boxes is that the outside world can only see your NAT boxes global (or sometimes even local within a global) address so they can't directly access hosts inside it without port forwarding set up.