GDI Scan
http://isc.sans.org/gdiscan.phpNote: You can force the command line version (gdiclscan.exe) to send the output to the screen instead of a log file by using the word "con" (not the quotes)...