Actually it's called MSblast. It's located in the win32 folder. It access your computer thru port 135 (I believe). The way I fixed it on my friends computer was delete MSblast.exe from startup, turn off computer, unplug modem, restart, delete MSblast.exe from the win32 folder and installed an firewall.