an interesting paper about how Conficker works http://www.honeynet.org/files/KYE-Confic
BTW, nameservers were down at my hosting for about 3 hours today. I wonder whether this is Conficker or just another DDOS botnet attack. Apparently the size of the attack is 9GB per second that can only be generated by a botnet.