[EP_X0FF]

Today, I’m happy to announce that based on the knowledge gained in that effort, we have successfully taken down a larger, more notorious and complex botnet known as Rustock.

http://blogs.technet.com/b/microsoft_on ... otnet.aspx

[Brookit]

Seems like game over for this version. Let's see if a new Rustock or a modified version will appear in near future...

[spaceman]

Here's some more info:

http://blog.fireeye.com/research/2011/0 ... stock.html

[Brookit]

And some more:

http://krebsonsecurity.com/2011/03/micr ... ntrollers/

[kmd]

Dr.Web company yes again attempts to advertise itself with help of Ntldrbot (aka Rustock.C)
this company has no any relations with rustock botnet shutdown as well as Rustock.C has no relations with terminated Newrest.
good pR :lol:



http://news.drweb.com/show/?i=1583&lng=ru&c=14

eng variant is not published yet, it likely will be "moderated"

[EP_X0FF]

Ntldrbot removed from news page :)

[frank_boldewin]

http://krebsonsecurity.com/2011/06/rust ... at-google/

[EP_X0FF]

Documentation about Rustock botnet available here.

MICROSOFT CORPORATION,
.
Plaintiff,
.
vs.
.
JOHN DOES 1-11, CONTROLLING
A COMPUTER BOTNET THEREBY
INJURING MICROSOFT AND ITS
CUSTOMERS,
.
Defendants.

http://noticeofpleadings.com/

[Brookit]

Microsoft offers $250,000 for information on Rustock botnet

[rkhunter]

Good MS report about taking down: http://www.microsoft.com/security/sir/s ... x#!rustock.
MS video http://www.youtube.com/watch?v=ihUUjiiKbRc
Small research about that on http://blogs.drweb.com/node/824 (Russian only)