Fully Patched is NOT fully protected

MS patches up to date.

AV definitions up to date.

Behind corporate firewall - no idea if THAT means anything.

Scenario: AV software detected 2 files, one quarantined, the other untouchable - oops.

Requires a supershell to allow permissions changes to registry to even see where the services were hacked so that the bastard worm could be disabled and destroyed.

Took several hours to clean all the machines in the office - most fully patched XP & 2000 boxes of the 2 different Downadup varieties we encountered.