For Vista, we check that netapi32.dll is later than 6.0.6001.18156. Note that this assumes SP1 for Vista is installed. More details on the netapi32.dll versions here:
http://support.microsoft.com/kb/958644 -- Cal A. Krzywiec Network Engineer The University of Scranton Phone: (570) 941-6748 Email: [email protected] Isabelle Graham wrote: > Does anyone have a homegrown check for the MS08-067 patch in Vista? > This is the vulnerability being exploited by Conficker/Downadup. The > canned checks only support XP and our homegrown checks for Vista seem > to be having trouble. > > ---- > Isabelle Graham > Information Security > American University
