"One conundrum: They don't know why it has a kill switch that
apparently kicks in on May 3.
"Also, the new variant has a mysterious dropped component. It
will eventually delete that component, and researchers are still
trying to figure out why.
"The new variant is not a single program but actually several
related components, David Haley, director of malware intelligence
at Eset, told TechNewsWorld. It is a subvariant of Conficker.A, the
very first version of Conficker, which came out late in 2008, he
said. Security experts are still scrambling to unravel
Conficker.AQ's code, but they have come up with tidbits that raise
more questions than they answer. Take the kill switch, for example.
"We're still trying to determine why Conficker will turn itself off
on May 3," Ivan Macalintal, a member of the Conficker Working
Group, which was set up to fight the worm, told TechNewsWorld."