BSOD with File & Printer Sharing enabled

[HSESupport]

We are getting the following on Win95 & Win98 machines who have File and Printer Sharing Enabled
"An exception OE has occurred @ 0028:C14D2CC8 in V x D mstcp(01) + 00001C68.
This was called from 0028:C001C3D4 in V x D ndis(01) + 00004860
It may be possible to continue normally.
Press any key to continue"
All MS patches have been applied (out of band issue etc) and still all 95/98 machines are BSOD'ing until File and printer sharing is removed.......we've pretty much ruled out Nukem, so what else could be hitting port 139?????????

 

[rudeboyjeff]

Port 139... there are a few trojans that hit that port. Run a trojan scanner. Mirc sometimes uses port 139, but if you're not running that, check for a trojan.