Quote:
Neel, the reason many people want to use a tool like the scanner is because, even if they close off all the right ports and are sure they've done everything right...the worm may do other things that they don't know about yet.
The worm may be able to recieve instruction on a certain port, and begin attacking differently.
I know that, I was discussing (giving my opinion about) the scanner you gave a link to, not about you and not about the worm. The scanner in this case detects the worm, a few variants. It gives you the link to the patches. Point is, if your system is patched you don't need the scanner for it isn't there. In fact you don't need a scanner, because you know when your infected, if your not a lazy admin who doesn't check logs etc. You will even notice it when there are 100 of variants, because they all do bassicly the same, infecting your server and doing what a worm does: spreading itself.