Conficker Worm Detection Tool

JDL releases Conficker Worm Detection Support tool for Malware Detection

JDL has released a support tool for detection of the Conficker Worm virus. You can download it and check your computer for the virus.

The script parses the output of nmap Version 4.85BETA or greater and generates a comma delimited output including those systems that are vulnerable and / or infected with the malware. The output of the script can be easily fed into Open Office.org, or other proprietary spreadsheet applications for easy data manipulation. This script depends on nmap for the scanning and nbtscan command for netbios, and MAC address resolution. The MAC address can be used by a network administrator in a properly switched network environment to track down a infected machine down to a port. This script is licensed under the GPL v2 and comes with absolutely no support or warranty. It has been tested using nmap 4.85beta on Cent OS 5, and Ubuntu 8.10.

Download conficker-scan.sh now.