Focus on Virus
Back to list
RE: Microsoft mydoom removal tool via SUS
Aug 11 2004 02:56PM
Eric McCarty (eric lawmpd com)
If you approve it for update in SUS Admin it will deploy it whether
workstations are infected or not. Uncheck it in the Approved updates
section and it will no longer be an issue.
From: Dan Denton [mailto:ddenton (at) PAYLESSOFFICE (dot) com [email concealed]]
Sent: Wednesday, August 11, 2004 7:42 AM
To: focus-virus (at) securityfocus (dot) com [email concealed]
Subject: Microsoft mydoom removal tool via SUS
We use SUS to distribute updates to our workstations and one of the
updates that frequently shows up is the Mydoom removal tool. The
description says that the appearance of this update is a sign of
infection, but none of my systems show infection in Symantec's SSC, and
Eeye's mydoom scanner shows nothing as well. Has anyone else had this
issue? I assume at this point that it's a false positive, but I'm
checking all my bases.
I apologize if this post is better suited to focus-ms.
Information Technology Manager, CCNA
Pay-LESS Office Products
[ reply ]
Copyright 2010, SecurityFocus