Virus

Mon Aug 25 15:47:16 UTC 2003

Wesley-

There is no evidence that the patch does not fix the vulnerability.  You
may be getting infected during the patching and cleaning process.  Best
bet is to patch, reboot, then clean. 

Regards,
===============================
Daniel Ingevaldson
Engineering Manager, X-Force R&D
dsi at iss.net 
404-236-3160

Internet Security Systems, Inc.
The Power to Protect
http://www.iss.net 
===============================

-----Original Message-----
From: Wesley Vaux [mailto:Wesley.Vaux at globalknowledge.com] 
Sent: Monday, August 25, 2003 11:25 AM
To: nanog at merit.edu
Subject: Virus

Has anyone noticed that after patching and cleaning machines that they
become infected again?  Is this just me?  What is your process for
remove Nachi.worm.

Sorry for bringing this back up.

		Wes Vaux, CCNA, CCDA
		Network Security Engineer,
		9000 Regency Pkwy
		Ste 500
		Cary, NC 27511
		t 919.463.6782
		f 919.463.1290

		Global Knowledge
		Experts Teaching Experts
		http://www.globalknowledge.com