Thanks fot this post amon. I got the bloody thing yesterday, system was shutting down after a few minutes of connection. Report was saying it was the lsass.exe. But of course thanks to the links on PPRuNe given by other posters i was able to get the info from Symantec and go into the regedit and hey presto! there it was, avserve.exe, just calmly sitting there causing havoc.......
Its now gone, no damage and I installed Zone Alarm Pro yesterday, never heard of it before and I'm really impressed by it, very easy to use and it adapts to my use so it knows what to trust.
I've also downloaded all patches from MS in Windows Update. I'd advise all PPRuNErs to do the same....