hi,i think i have the worm Blast every time i start to download a messege appears saying a file Issas.exe[located in widnows/system32 directory] terminated process cuz of some kind of statues codee and the Pc needs restart??? i turned on my firewall and now it doesn't resets like before,but my PC is really much slower then ussual:( i downloaded the removal tools for blast and other worms but till now no results is this somekind of virus or i am wrong?

i was having the same prob mate and i followed these instruction and is all good now good luck.. Enable the Windows XP Internet Connection Firewall or a third-party firewall on the affected computer. Disconnect the computer from the Internet. Restart the computer. If you have problems rebooting, reboot in safe mode. Press CTRL+ALT+DEL. Click the Task Manager. Click the Processes tab. Press and hold the CTRL key and then click C:\WINDOWS\avserve.exe and c:\WINDOWS\system32\*_up.exe. Click the End Task button. Click Start. Click Search and then search for and delete the following files: C:\WINDOWS\avserve.exe c:\WINDOWS\system32\*_up.exe Click Start again, click Run, and then type: regedit32 Click OK. In Registry Editor, locate and delete the following registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "avserve.exe" = C:\WINDOWS\avserve.exe Connect the computer to the Internet. Got to the Windows Update site, and click the Scan for Updates button. Download and install the critical updates recommended after the scan.

Microsoft has posted a security warning just today about the worm that is causing your problem: http://www.microsoft.com/security/incident/sasser.asp#infected

Hi joro, mada_oz, mtlieb, hi everybody, As pointed out by mada_oz and mtlieb, your malware is Sasser! See this thread Can't remove II-worm Sasser ?? Hel There are now 2 variants of the worm: Sasser and Sasser.B There's a removal tool by Symantec There're 3 patches by Microsoft: -> Microsoft Security Bulletin MS04-011 -> Microsoft Security Bulletin MS04-012 -> Microsoft Security Bulletin MS04-014 Good luck! Have a good day, Gérard from Paris, France