W32.Changeup: how the worm was created

Blog entry: http://www.symantec.com/connect/blogs/w32changeup-how-worm-was-created