BE CAREFUL with this if you are
upgrading WinNT with MS security patch.
DO NOT install 823803. 
Check with MS Support first regarding RAS.
(823980)
Buffer Overrun In RPC Interface Could Allow Code Execution
is the one you want for NT for that Worm (lovsan/Mblast.exe)