Symantec has posted a new version (1.0.3) that correctly identifies an unpatched MSDE installation. Thanks to David @ Symantec for following up with me, the tool can be downloaded at: http://securityresponse.symantec.com/avcenter/venc/data/w32.sqlexp.worm.remo val.tool.html Trent. -----Original Message----- From: trent dilkie [mailto:trent@dilkie.com] Sent: Monday, January 27, 2003 12:46 PM To: 'bugtraq@securityfocus.com' Subject: RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! I just got a confirmation from Symantec. The fixSQLex.exe tool ( http://securityresponse.symantec.com/avcenter/venc/data/w32.sqlexp.worm.remo val.tool.html ) DOES NOT DETECT or fix MSDE, only SQL Server. They are working on an update, it should be posted today. Trent.
