http://www.networkworld.com/news/2009/021209-conflickr-bounty-microsoft.html
"information that results in the arrest and conviction of those responsible for illegally launching the Conflicker malicious code on the Internet"
Ok, #1 there is no "internet"
#2 "Illegally launching" since when?
There are insecure OSes running on machines with IP connections. That is all.
I read "there are two main versions of Conflicker, "Flavor A" and "Flavor B," which appear to have propagated an additional 450,000 and 1.7 million copies of themselves respectively in the last four days alone". That is pretty good reproduction, a lot of bandwidth available.