ACROBAT TROJAN ???

sam1967_at_hetnet.nl
Date: 06/07/03 

Date: Sat, 7 Jun 2003 12:59:43 +0000 (UTC)

I copied a veriosn of Acrobar Reader 4 from an Asian modem CD-ROM and
it seems to contain a trojan horse !
when i look at Tiny Personal Firewall status it tells me that ACRORD32
is listening on 137,138 and 139 !
and sure enough connection attempts are made regularly from computers
to my port 137.
is this natural ?

also internet explore (iexplore.exe ) is listening on UDP,
localhost:1120 (this may be some form of loopback)

Quantcast