Same Botnet, Same Guys, New Code : Author: Bureau

The author says Win32/Kelihos is a separate malware family from Win32/Nuwar and Win32/Waledac because code and binaries are different. Author concludes that we should classify all three families as part of the same operation where similar strategies are being used to infect systems.