Over the weekend there was a botnet doing fairly wide scale scanning for hosts affected by the vulnerabilities in the MS06-040 advisory. While technically a botnet, it was spreading in a worm like fashion.

The Internet Storm Center has a nice writeup on MS06-040. MS06-040 is a vulnerability of the Windows Server Service that can have a major impact on IT infrastructures if not patched properly.