uksti

We've just been attacked. Every client on XP/2K has been infected and they keep being attacked by the others so we're shutting each one down.

Apart from running this,adding the patch and visiting every PC - any other ideas ?

Nachi Attack!

Cheers, Baz

Soulgirl

Nachos? Pefect cure is chilli cheese sauce

giblet

Bad news - yer probably gonna have to visit every vulnerable machine and install the patch. Plus you'll have to make sure the AV definitions are up to date on each pc - but it's a reasonably easy clean and thankfully the payload isn't harmful (other than to your bandwidth!)

A SUS server is nice to have on your network for sending these patches out (although it's not a firefighting tool - it'll just make your bandwidth issues worse in the short term while every pc tries to get the patch) Would be worth your while investigating once you're sorted...

For AV software you can get apps like McAfee EPO which will take care of your client AV software updates. Again - later..

Best of luck - we had to bite the bullet and run around patching our whole network manually. '00s of pc's :-(

uksti

thanks - typically we had SUS ready to go the night after we were attacked.

Still nice to meet all those people who have real jobs

giblet

guess what - we hadn't quite got around to ticking the box that would send the patch for distribution so it was sitting on the SUS server straining at the leash. :-(

Ho hum - doubt we'll make that mistake again

Don't you just love the way MS says you need to be on NT4 SP6 for the patch to work! Spose we should be grateful they support it at all...

With regards from geekdom

Giblet