just recently, i've been getting connections to port 1025 on my win2k
box which tcpview says is associated with the msdtc.exe process.  it
is my understanding that this process is microsoft transaction server
although i haven't been able to verify that i should be expecting it
to listen on port 1025.  are these connections trying to exploit a
security vulnerability or is this a trojan horse or is this something
else?  what should i do to mitigate this problem?  why am i suddenly
seeing this?