'Conficker SWS Scanner', and 'WhatChanged'
- by Brandon Dimmel on 20090402 @ 06:09PM EST | google it | send to friends
- Filed under Software | Shell City | (related terms: conficker, sws, scanner, kaminsky, whatchanged)
Conficker SWS Scanner
SWS is an easy way to test networks for Conficker, thanks to researchers at The Honeynet Project. According to Dan Kaminsky, "What we've found is pretty cool: Conficker actually changes what Windows looks like on the network, and this change can be detected remotely, anonymously, and very, very quickly. You can literally ask a server if it's infected with Conficker, and it will tell you." The link is to SWS, on Kaminsky's site, which is a quick scanner for Conficker.
What Changed
WhatChanged is a simple utility that searches for modified files and registry entries. It is useful for checking program installations. There are two steps for using WhatChanged: 1) take a snapshot of the state of the system and 2) run it again to see the differences from the previous snapshot.
Today's fresh software picks were provided courtesy of Bob Helmer at Shell Extension City. Please note that the below software descriptions are provided solely from the developer and are absent from any guarantee or warranty. You are encouraged to review the Shell Extension Software Policy for more details.
