Backdoor virus on windows 2000

[winifreid]

Well, those of you who have seen my previous posts about wanting to install Windows 2000 will want to laugh. I installed 2000 SP3 things were going fine, but then I deceided to launch the SP4 download program after configuring my modem. I never even launched IE. Well, about a 100 minutes later SP4 said it was finished downloading, but it didn't install. I noticed my modem light still flashing and knew I was in trouble. I ran avg and it indcated that I had Backdoor.sdboot.
I could heal, but the thing keeps coming back. I read the symantec site alert and they indicate that it is best to just reinstall since there is no way of knowing for sure what was compromised. What do you think?
If I do reinstall, what services should I turnoff before I connect to the internet? Does SP4 prevent this sort of attack?
It seems like MS should distribute their software so that you can update it without it getting infected doing so.

[Capmaster]

I would reformat and reinstall the latest you have. Then get SP4 only from the Windows Update site.

Make sure you have all the security patches installed and you should be fine.

[winifreid]

I think this virus comes via some open port. I assume the SP4 download program does essentially what windows update does. I think I need to turn off some services before I connect at all to the internet. I am just not sure which ones I need and which ones to turn off. Also, does SP4 protect form attacks like these. I have never had a problem like this with 98.

[Capmaster]

That's what a firewall is for. If someone is scanning your ports and finding an open one, you need to get a firewall ...FAST!!! At least get a software one (Sygate makes a good one, so does Symantec/Norton)