RE: Virus

["Ingevaldson, Dan (ISS Atlanta)" <dsi () iss net>]

Wesley-

There is no evidence that the patch does not fix the vulnerability.  You
may be getting infected during the patching and cleaning process.  Best
bet is to patch, reboot, then clean. 

Regards,
===============================
Daniel Ingevaldson
Engineering Manager, X-Force R&D
dsi () iss net 
404-236-3160
 
Internet Security Systems, Inc.
The Power to Protect
http://www.iss.net 
===============================


-----Original Message-----
From: Wesley Vaux [mailto:Wesley.Vaux () globalknowledge com] 
Sent: Monday, August 25, 2003 11:25 AM
To: nanog () merit edu
Subject: Virus



Has anyone noticed that after patching and cleaning machines that they
become infected again?  Is this just me?  What is your process for
remove Nachi.worm.

Sorry for bringing this back up.

                Wes Vaux, CCNA, CCDA
                Network Security Engineer,
                9000 Regency Pkwy
                Ste 500
                Cary, NC 27511
                t 919.463.6782
                f 919.463.1290

                Global Knowledge
                Experts Teaching Experts
                http://www.globalknowledge.com