Duqu(similar to Stuxnet) is notorious worm that exploit Windows Zero-day Vulnerability. Microsoft released temporary fix yesterday for this vulnerability . NSS Labs claimed that they developed very accurate Duqu detection tool , available for free .
This tool detects all DuQu drivers installed on a system. This tool was developed in the hopes that additional drivers can be discovered to allow us to learn more about the functionality, capabilities and ultimate purpose of DuQu.
According to the test, NSS tool Success rate is 100%, zero false positivies. Developers said it is using advanced pattern recognition techniques, it is also capable of detecting new drivers as they are discovered.
Two new drivers were discovered after the tool was completed, and both were detected by the NSS tool with no updates required.
