Scanning for Confiker via nmap

[danthemanbaxter at gmail.com (Dan Baxter)]

So forgive my lack of nmap-fu, but if I run this what am I looking for?  I
get back responses that list some with 445 open, some closed and a few
filtered.  How do I determine which may be infected.


for clarification I'm running nmap -p 445 --script smb-check-vulns.nse

Thanks

Dan Baxter
-------------------------------------------------
Quis custodiet ipsos custodes?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.pauldotcom.com/pipermail/pauldotcom/attachments/20090331/db3cdaa4/attachment.htm