It certainly sounds like he has the blaster worm or one of the variants.
You should go to this thread and read thru it. It go into detail the patch, regestry changes, firewall and anti-virus/worm/trojan issues you should address to protect yourself from this known security hole. http://www.techimo.com/forum/showthr...hlight=msblast