Having read the article it's clear that the headline doesn't really match what Microsoft actually said.
They simply advise going back to a pre-infected state, up to, and including a reinstall. -ASB: http://about.me/Andrew.S.Baker Sent from my Motorola Droid On Jun 27, 2011 6:41 PM, "Michael B. Smith" <[email protected]> wrote: > Seems odd to me. After fixmbr, you should be able to do a System Restore prior to the infection - if you know when the infection occurred. > > Regards, > > Michael B. Smith > Consultant and Exchange MVP > http://TheEssentialExchange.com > > > -----Original Message----- > From: Kurt Buff [mailto:[email protected]] > Sent: Monday, June 27, 2011 6:19 PM > To: NT System Admin Issues > Subject: This is - unsettling... > > Not that it isn't good practice anyway, but to have MSFT saying > they're helpless is a bit disquieting. > http://www.computerworld.com/s/article/9217953/Rootkit_infection_requires_Windows_reinstall_says_Microsoft?source=CTWNLE_nlt_security_2011-06-27 > > Kurt > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
