This seems to be the SASSER worm.
Follow the steps as in this article
http://www.microsoft.com/security/incident/sasser.asp
==========================================================
1. First and Foremost, Unplug your Internet cable.
2. Boot your system, if it keeps rebooting within 60 seconds, then quickly
open command prompt by typing 'cmd' in the Run dialog box from Start menu.
Type 'shutdown -a' in the command prompt. This will prevent the system
from rebooting.
3. Open Task Manager by pressing 'ctrl+alt+del' and click on the Processes
tab. Look for the following processes, and kill them by selecting them and
pressing 'End process'
any process ending with _up.exe
any process starting avserv
hkey.exe
msiwind84.exe
wmiprsw.exe
4. Now follow the steps 1,2 and 3 mentioned in the above article.
This should remove the SASSER worm and your system should work fine.
Note: Remember to reconnect the Internet cable once you kill the processes
and try connecting to the internet.
If still you have problems, the best thing to do would be contact Microsoft
Phone support.
Hope this helps.
Thanks,
Prashanth
This posting is provided "AS IS" with no warranties, and confers no rights.
