Probably Welchia. Good that you got rid of it. You might want to get the RPC patch from http://windowsupdate.microsoft.com/