Blaster/Welchia Detection

Requesting a tool equivalent to the Scan utility offered by Microsoft that tells me if the machine is infected not that if has been patched. Must be able to scan subnets, of any size. The utility offered by Microsoft scans to inform you if your machine has not been patched we need the utility to verify the machine has been comprised with the **Blaster Worm** and or **Welchia** Worm.

Options to the Program:

- Scan subnets of Any size (GUI)

- Options to either clean the infected subnet or just scan the subnet

- Gui Output of machines that are Vulnerable, been Patched or are infected.

- Infected machines listed with a NBTSTAT ??"A so we have all the information of the host that is infected

- If possible clean infected machine or kill task of the infected machine or turn off the machine

- We have machines infected in a controlled environment to test it with the utility

**Welcihia Virus Infromation:**

- [url removed, login to view]

**Blaster Virus Information**

[url removed, login to view]

Some idea’s we have come up for for non intrusive detection?

- ICMP Ping flood detection

- 4444 Open (Can no longer use, it only used for transfering the worm)

- Checksum against the system and if we see it running the Welcia or the Blaster and tag it as infected

- Scan the system remotely for the infected file

- RPC DCOM scan

We need the utility ASAP.


## Deliverables

1) Complete and fully-functional working program(s) in executable form as well as complete source code of all work done. 2) Installation package that will install the software (in ready-to-run condition) on the platform(s) specified in this bid request. 3) Complete ownership and distribution copyrights to all work purchased.

## Platform

Windows XP, Windows 2000, Windows NT

Compétences : Sécurité Informatique, Ingénierie, MySQL, PHP, Architecture Logicielle, Tests de Logiciels, Administration Système, Sécurité Web

en voir plus : utility gui, bid blaster, virus clean, worm, vulnerable, virus infected, rpc, flood, detection, blaster, flood php, http rpc, program rpc, patched, scan file system, open file gui, program ping, Machine Tool, gui ping, subnet

Concernant l'employeur :
( 0 commentaires ) United States

Nº du projet : #2967054