If you approve it for update in SUS Admin it will deploy it whether
workstations are infected or not. Uncheck it in the Approved updates
section and it will no longer be an issue.
Eric
-----Original Message-----
From: Dan Denton [mailto:ddenton (at) PAYLESSOFFICE (dot) com [email concealed]]
Sent: Wednesday, August 11, 2004 7:42 AM
To: focus-virus (at) securityfocus (dot) com [email concealed]
Subject: Microsoft mydoom removal tool via SUS
We use SUS to distribute updates to our workstations and one of the
updates that frequently shows up is the Mydoom removal tool. The
description says that the appearance of this update is a sign of
infection, but none of my systems show infection in Symantec's SSC, and
Eeye's mydoom scanner shows nothing as well. Has anyone else had this
issue? I assume at this point that it's a false positive, but I'm
checking all my bases.
I apologize if this post is better suited to focus-ms.
Dan Denton
Information Technology Manager, CCNA
Pay-LESS Office Products
workstations are infected or not. Uncheck it in the Approved updates
section and it will no longer be an issue.
Eric
-----Original Message-----
From: Dan Denton [mailto:ddenton (at) PAYLESSOFFICE (dot) com [email concealed]]
Sent: Wednesday, August 11, 2004 7:42 AM
To: focus-virus (at) securityfocus (dot) com [email concealed]
Subject: Microsoft mydoom removal tool via SUS
We use SUS to distribute updates to our workstations and one of the
updates that frequently shows up is the Mydoom removal tool. The
description says that the appearance of this update is a sign of
infection, but none of my systems show infection in Symantec's SSC, and
Eeye's mydoom scanner shows nothing as well. Has anyone else had this
issue? I assume at this point that it's a false positive, but I'm
checking all my bases.
I apologize if this post is better suited to focus-ms.
Dan Denton
Information Technology Manager, CCNA
Pay-LESS Office Products
[ reply ]