1. Confirm your service pack with (SP is productlevel):
SELECT SERVERPROPERTY('productversion'), SERVERPROPERTY ('productlevel'), SERVERPROPERTY ('edition')
If it is SP3 then you're fine. If it isn't make sure you install at least SP2 before continuing.
2. Set MSSQL and SQL Agent services to manual and reboot the machine (the worm only lives in memory when SQL is active).
3. If you can (check with your vendor is any vendor apps on the server) just upgrade to SQL Servr SP3 and continue to step 5. If you canot go higher then SP2 see step 4.
4. Download and install the patch from microsoft at:
http://www.microsoft.com/Downloads/details.aspx?displaylang=en&FamilyID=DCFDCBE9-B4EB-4446-9BE7-2DE45CFA6A89Installation instructions can be found in the readme file afetr the extraction of the fiels.
5. Set services back to automatic and reboot the server.