You may have a variant of the Sasser worm. Try some antivirus scans. You may have to replace that file with one from a non infected machine or from the XP disk itself.
ive repaired the file and got it to boot back up, but just want to know whats causing it as it's happing alot latly. He's got windows fire wall on with avg all up to date.