[61147] in North American Network Operators' Group
RE: Virus
daemon@ATHENA.MIT.EDU (Ingevaldson, Dan (ISS Atlanta))
Mon Aug 25 11:48:32 2003
Date: Mon, 25 Aug 2003 11:47:16 -0400
From: "Ingevaldson, Dan (ISS Atlanta)" <dsi@iss.net>
To: "Wesley Vaux" <Wesley.Vaux@globalknowledge.com>,
<nanog@merit.edu>
Errors-To: owner-nanog-outgoing@merit.edu
Wesley-
There is no evidence that the patch does not fix the vulnerability. You
may be getting infected during the patching and cleaning process. Best
bet is to patch, reboot, then clean.=20
Regards,
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D
Daniel Ingevaldson
Engineering Manager, X-Force R&D
dsi@iss.net=20
404-236-3160
=20
Internet Security Systems, Inc.
The Power to Protect
http://www.iss.net=20
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D
-----Original Message-----
From: Wesley Vaux [mailto:Wesley.Vaux@globalknowledge.com]=20
Sent: Monday, August 25, 2003 11:25 AM
To: nanog@merit.edu
Subject: Virus
Has anyone noticed that after patching and cleaning machines that they
become infected again? Is this just me? What is your process for
remove Nachi.worm.
Sorry for bringing this back up.
Wes Vaux, CCNA, CCDA
Network Security Engineer,
9000 Regency Pkwy
Ste 500
Cary, NC 27511
t 919.463.6782
f 919.463.1290
Global Knowledge
Experts Teaching Experts
http://www.globalknowledge.com
