I would use something like this: http://www.symantec.com/security_response/writeup.jsp?docid=2011-121607-4952-99

Generally they work ok, and then you won't have to roll it back.
_________________________
I am the Doctor, and THIS... is my SPOON!