Yeah, I parsed through that as well. I think that a rescue disk that will put on a standard MBR and that has a good disinfectant on it will probably do the job.
On Mon, Jun 27, 2011 at 15:52, Andrew S. Baker <[email protected]> wrote: > > Having read the article it's clear that the headline doesn't really match > what Microsoft actually said. > > They simply advise going back to a pre-infected state, up to, and including > a reinstall. > > -ASB: http://about.me/Andrew.S.Baker > > Sent from my Motorola Droid > > On Jun 27, 2011 6:41 PM, "Michael B. Smith" <[email protected]> wrote: >> Seems odd to me. After fixmbr, you should be able to do a System Restore >> prior to the infection - if you know when the infection occurred. >> >> Regards, >> >> Michael B. Smith >> Consultant and Exchange MVP >> http://TheEssentialExchange.com >> >> >> -----Original Message----- >> From: Kurt Buff [mailto:[email protected]] >> Sent: Monday, June 27, 2011 6:19 PM >> To: NT System Admin Issues >> Subject: This is - unsettling... >> >> Not that it isn't good practice anyway, but to have MSFT saying >> they're helpless is a bit disquieting. >> >> http://www.computerworld.com/s/article/9217953/Rootkit_infection_requires_Windows_reinstall_says_Microsoft?source=CTWNLE_nlt_security_2011-06-27 >> >> Kurt >> >> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ >> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ >> >> --- >> To manage subscriptions click here: >> http://lyris.sunbelt-software.com/read/my_forums/ >> or send an email to [email protected] >> with the body: unsubscribe ntsysadmin >> >> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ >> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ >> >> --- >> To manage subscriptions click here: >> http://lyris.sunbelt-software.com/read/my_forums/ >> or send an email to [email protected] >> with the body: unsubscribe ntsysadmin > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
