W32.SqlSlammer

Sat Jan 25 21:07:39 UTC 2003

Can you confirm / forward a trace of what is affecting a supposedly patched & rebooted machine?

Thanks,
Andrew
taqua.com

> -----Original Message-----
> From: Drew Weaver [mailto:drew.weaver at thenap.com]
> Sent: Saturday, January 25, 2003 1:21 PM
> To: 'nanog at merit.edu'
> Subject: W32.SqlSlammer
> 
> 
> 
> By the way, I know you guys probably don't care but McAfee is 
> saying that if
> you have SP3 on your windows2000 server you will not be infected with
> SQLSlammer, this is absolutely NOT true, I have a box with 
> sp3 and it IS
> infected.
> 
> -Drew
> 
> 