I'd grab the fport utility from http://www.foundstone.com/ and run it on the PDC to see what process is using those open ports.
> Now my question is, why these port are open on PDC? Is > there something suspicious? What should I do to find > the exact reason?