MSBLAST Worm 1

[buddha75]

Does anyone know of a automatic tool that will scan IP and subnet ranges for MSBLAST variants?

I've checked the Big Three (NAV, McAfee, and Trend Micro) but their scanning tools only scan local drives.

Any help would be appreciated.

 

[3rdof5]

This utility will scan IP range for systems that do not have 823980 Security Patch installed.

http://www.microsoft.com/downloads/...6c-b71b-4992-91f1-aaa785e709da&DisplayLang=en

It generates a list of vulnerable IP's (Vulnerable.txt).
Maybe a starting point?

 

[buddha75]

Thanks for the tip!

 

[wbg34]

Eeye has a good tool as well that scans for vulnerable machines.

http://www.eeye.com/html/