According to The Register the conficker worm will have a signature that admins will be able to use to find which machines might have the worm. Up til now the only way was to monitor traffic and with Conficker C that was impossible as it didn’t send any traffic on the network but was waiting for instructions on a certain day.
Conficker Worm Signatures to be Released
