[70169] in North American Network Operators' Group
RE: FW: Worms versus Bots
daemon@ATHENA.MIT.EDU (Sean Donelan)
Tue May 4 10:55:30 2004
Date: Tue, 4 May 2004 10:54:55 -0400 (EDT)
From: Sean Donelan <sean@donelan.com>
To: "Smith, Donald" <Donald.Smith@qwest.com>
Cc: nanog@merit.edu
In-Reply-To: <2D00AD0E4D36D411BD300008C786E42412B26538@denntex021.ad.qintra.com>
Errors-To: owner-nanog-outgoing@merit.edu
On Tue, 4 May 2004, Smith, Donald wrote:
> If you follow these steps outlined by SANS you should be able to
> successfully update
> and NOT get infected. This is short, easy, fully documented (with
> pictures :)
> http://www.sans.org/rr/papers/index.php?id=1298
The risk is smaller, but still exists if you follow these directions
for XP pre-SP2. See the Microsoft release notes for XP SP2 for details
about the fix.
If you do not have XP SP2, you need to disconnect your computer from the
network prior to every boot cycle until it is fully patched.
