Попробуй это
http://vil.nai.com/vil/stinger/
Небольшая цитата остальное читай на ссылке
This version of Stinger includes detection for all known variants, as of July 19, 2004:
BackDoor-AQJ, BackDoor-JZ Bat/Mumu.worm,
Exploit-DcomRpc IPCScan IRC/Flood.ap
IRC/Flood.bi IRC/Flood.cd NTServiceLoader
PWS-Narod PWS-Sincom.dll W32/Anig.worm
W32/Bagle@MM
W32/Blaster.worm (Lovsan) W32/Bugbear@MM
W32/Deborm.worm.gen W32/Doomjuice.worm W32/Dumaru
W32/Elkern.cav W32/Fizzer.gen@MM W32/FunLove
W32/Klez W32/Korgo.worm W32/Lirva
W32/Lovgate W32/Mimail W32/MoFei.worm
W32/Mumu.b.worm W32/MyDoom W32/Nachi.worm
W32/Netsky W32/Nimda W32/Pate
W32/Polybot W32/Sasser.worm W32/Sdbot.worm.gen
W32/SirCam@MM W32/Sober W32/Sobig
W32/SQLSlammer.worm W32/Swen@MM W32/Yaha@MM
W32/Zafi