I’ve just listened to Steve Gibson’s podcast about Conficker. A-C and it’s by far the best explanation of how the worm works that I’ve listened to/read about.
Start about half way through Episode 193 to get to the important stuff:
http://www.grc.com/securitynow.htm
