Niall Fitzgibbon and Mike Wood in SophosLabs have written a detailed technical paper analysing the latest version of the Conficker worm.
It’s an excellent piece of research, but not for the faint-hearted so be sure to be wearing your propeller hat before downloading the PDF of “Conficker-C – a technical analysis”.
By the way, don’t be put off by the date being April the first. This isn’t an April fool. We’re not the kind of guys to do that kind of thing..
Oh, and if you haven’t already done so. Do yourself a favour if you suspect you might be infected by Conficker, and download our free removal tool.