Win32/Renocide, the aftermath

Quote:
"On March 8th, we announced the release of our latest Malicious Software Removal Tool (MSRT), version that included detection and cleaning capabilities for a backdoor enabled worm we are calling Win32/Renocide. If you are not familiar with this threat, we recommend reading our encyclopedia entry here."

http://blogs.technet.com/b/mmpc/archive/2011/03/16/win32-renocide-the-aftermath.aspx

 

Nasty piece of work, nice that its removal is included in the msrt tool

 

There's one part I find amusing here:

Look at the picture where it says The file-sharing application's shared folder may look similar to the following:

I wonder if this botnet was created by one of those anti-piracy groups? It does make one wonder, uh?