This article has moved to 

http://www.cgisecurity.net/anatomy-of-the-web-application-worm.html