::Trend Micro Threat Resource Center::

20 March 2009

Breakdown of Conficker / Downadup

This is a breakdown of how the worm works:

A very detailed writeup here.