Dennis Faas's picture

'Conficker SWS Scanner', and 'WhatChanged'

Conficker SWS Scanner SWS is an easy way to test networks for Conficker, thanks to researchers at The Honeynet Project. According to Dan Kaminsky, "What we've found is pretty cool: Conficker actually changes what Windows looks like on the network, ... and this change can be detected remotely, anonymously, and very, very quickly. You can literally ask a server if it's infected with Conficker, and it will tell you." The link is to SWS, on Kaminsky's site, which is a quick scanner for Conficker. http://www.doxpara.com What Changed WhatChanged is a simple utility that searches for modified ... (view more)

Subscribe to RSS - sws