My fault, actually, check this file. C:\win.log. If it exist, then you got sasser warm. To get rid of it, go to google and search for SASSER. There is a tools from symantec you can get to remove it.