We declined the update in WSUS, then had to go to each computer where
this virus had installed and do the following:
1. Run "wuauclt /detectnow" at the command prompt.
2. Remove the desktop search virus from Add/Remove programs.
4. Reboot
3. Run "wuauclt /detectnow" at the command prompt again.
The first windows update command ensures that the virus register as
declined will not attempt to re-install after it is removed. We had
to do this on just over 60 workstations, so we're feeling more than
just a little negative toward MS search right now. There is perhaps a
better way to do this in a vbs script that can be applied via a GPO,
but we didn't have the time to mess around.
Anyone out there care to provide a script that can do this? If I get
some time today, I may be able to post one.
Allan
>> Stay informed about: Update KB917013 - Windows Desktop Search 3.01