Full Version of this article can be found here

asr_fnt.exe

What is it?

asr_fnt.exe is a file dropped by the wootbot.ge worm.

What does it do?

This worm exploits the Windows LSASS vulnerability to propagate across networks. This vulnerability is a buffer overrun that allows remote code execution.

More info:

http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_WOOTBOT.GE