DIFFERENT EXEs listening on NETBIOS ports 137-9

sam1967_at_hetnet.nl
Date: 06/09/03


Date: Mon, 9 Jun 2003 17:32:35 +0000 (UTC)

I think my machine has been trojaned.
Kerio firewall shows different EXEs listening on 137,138 and 139.
First it was ACRORD32.EXE then KRNL386.EXE now it is RNAAPP.EXE

any idea what it could be ?