It is a sasser worm, all right. But I think I have a program called FxSasser that eliminates the worm, even when on startup it says: "system cannot find lsass.exe blabla" but the original Lsass.exe is in the WINDOWS/System32 folder. The program FxSasser by Symantec is the solution.
Linky:
FxSasser