Try this easy conficker scan.....cfdetector!

[Hard_ROCKER]

I assume what this test does is it simply tries to access a few security vendors web sites and comes up with clean after it is successful or infected if it is unsuccessful at accessing them. Since Conficker worm blocks access to those sites, that is i suppose the easiest way to tell if a computer is infected with Conficker or not. The .A variant is a different story though and this test doesn't detect it.

http://iv.cs.uni-bonn.de/wg/cs/applications/containing-conficker/

[polonus]

Hi Darth-Mikey,

Thank you for the exact summary of what this test does and does not, and how and why it works, could not have put it better. Now SRI also came up with a new Conficker scanner tool, get it here:
http://mtc.sri.com/Conficker/contrib/scanner.html
and the snort detection implementation here: http://mtc.sri.com/Conficker/contrib/plugin.html#example-code

polonus