nmap -T4 -A -v ipaddress

Will attempt (amongst others):

- to detect all the open ports
- to reveal the O/S
- to show the MAC address (and thereby the nic manufacturer)
- to return most nbstat queries including the machine name

I'm sure that will narrow down your search.

--
Peter van Houten

On the 31/03/2009 21:07, John Aldrich wrote the following:
Hmm... good point. If eEye's scanner finds it and says it's "vulnerable"
that means it must be at least a Win2k box. Any suggestions on how to find
that machine?

-----Original Message-----
From: Ben Scott [mailto:mailvor...@gmail.com]
Sent: Tuesday, March 31, 2009 12:58 PM
To: NT System Admin Issues
Subject: Re: locating one machine

On Tue, Mar 31, 2009 at 12:53 PM, Ben Scott<mailvor...@gmail.com>  wrote:
Well, I have a sneaking suspicion it's a Windows 98 machine...
  Ah, that's tough.  Win 98 has almost nothing for remote management.

   Wait a minute.

   All the Conficker detectors I know of (which, admittedly, isn't
much) look for an unpatched RPC service, or for an RPC service which
has the signature of the Conficker-provided patch.

   Win 9X doesn't *have* an RPC service, does it?

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

Reply via email to