There’s a great article on Conficker variant C’s peer-to-peer update process. It allows for distributed updating abilities by scanning for Conficker peers and implements a simple update protocol

  • What’s your version? Here’s my version. If your running version is higher than mine, send me yours, if not I’ll send you mine.

It’s a pretty in-depth read but very interesting. Check it out