http://www.eeye.com/Downloads/Security-Tools/Conficker-Worm-Scanning-Utility.aspx
-Marc Maiffret www.marcmaiffret.com On Fri, Nov 20, 2009 at 5:33 AM, Kelsey, John <jckel...@drmc.org> wrote: > Looks like we're getting hit the Conficker this morning. Sophos is > reporting several hundred 'conficker detected/cleaned' messages, so at least > its catching it...BUT....how do I determine the source of the infection? > Something I can look for with wireshark or something? Apparently there are > some unprotected machines on the network. > > Any suggestions are welcome! > > > ******************************* > John C. Kelsey > DuBois Regional Medical Center ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~