All the blurb that I can find says that it spreads by using the LSASS vulnerability, which is the one that MS04-011 fixes.

What conflicting information have you had?
_________________________
-- roger