Windows 10: Microsoft Hijacks Necurs Botnet that Infected 9 Million PCs Worldwide

Brink · Mar 10, 2020

Microsoft today announced that it has successfully disrupted the botnet network of the Necurs malware, which has infected more than 9 million computers globally, and also hijacked the majority of its infrastructure.

The latest botnet takedown was the result of a coordinated operation involving international police and private tech companies across 35 countries.

The operation was conducted successfully after researchers successfully broke the domain generation algorithm (DGA) implemented by the Necurs malware, which helped it remain resilient for a long time.
Click to expand...

Microsoft Hijacks Necurs Botnet that Infected 9 Million PCs Worldwide

Also:
https://blogs.microsoft.com/on-the-i...crime-disrupt/

:)

bruinator · Mar 10, 2020

steps taken for infected Pc's.

I was hoping someone could give me a list of step by step instructions you use as a guide to clean virus, malware...etc. so I can keep my PC clean if it gets infected.

thx

Harkanwar Singh · Mar 10, 2020

My PC infected with browser hijacker

Hi Poseto,

Thank you for posting your query in Microsoft Community.

a. Does the issue occur in Internet Explorer as well?

b. Have you tried reproducing the issue right after resetting the PC prior installing any other application?

c. Are you able to work with 'smarturl.it' tab?

The issue seems to be arising due to browser hijacking. Browser hijacking is a type of online fraud. Scammers use malicious software to take control of your computer's Internet browser and change how and what it displays when you're surfing the web.

Fix your hijacked web browser

Note: The Reset Internet Explorer Settings feature might reset security settings or privacy settings that you added to the list of Trusted Sites. The Reset Internet Explorer Settings feature might also reset parental control settings. We recommend
that you note these sites before you use the Reset Internet Explorer Settings feature.

I would suggest you to run a virus scan and check if the issue persists.

Microsoft Safety Scanner

Note: Any data files that are infected may only be cleaned by deleting the file entirely, which means there is a potential for data loss.

Hope this information is helpful. Do let us know if you need any further assistance, we will be glad to assist you.

Wrigleyvillain · Mar 10, 2020

MS Leads Shut Down Of Rustock--MAJOR Spam Botnet

Microsoft's Digital Crimes Unit, working with federal law enforcement agents, has brought down the world's largest spam network, Rustock. Rustock, at its peak, was a botnet of around 2 million spam-sending zombies capable of sending out 30 billion spam email per day. Microsoft's wholesale slaughter of Rustock could reduce worldwide spam output by up to 39%.

Rustock was taken down, piece by piece, in a similar way to the Mega-D botnet. First the master controllers, the machines that send out commands to enslaved zombies, were identified. Microsoft quickly seized some of these machines located in the U.S. for further analysis, and worked with police in the Netherlands to disable some of the command structure outside of the U.S. With the immediate threat disabled, Microsoft then worked with upstream providers to black hole the IP addresses of whoever was controlling the botnet. To prevent further master controllers popping up, Microsoft worked with Chinese CN-CERT to block registration of domains that could be used by new command and control servers.

Finally, Microsoft is now working with ISPs and CERTs around the world to help clean the Rustock malware from around 1 million infected machines. It's also worth noting that Microsoft didn't do this alone; specialists from Pfizer, FireEye (the company behind the Mega-D botnet takedown), and the University of Washington helped out.
Click to expand...

Interesting tale and very good news.

Source

Windows 10: Microsoft Hijacks Necurs Botnet that Infected 9 Million PCs Worldwide

Microsoft Hijacks Necurs Botnet that Infected 9 Million PCs Worldwide

Microsoft Hijacks Necurs Botnet that Infected 9 Million PCs Worldwide

Microsoft Hijacks Necurs Botnet that Infected 9 Million PCs Worldwide

Microsoft Hijacks Necurs Botnet that Infected 9 Million PCs Worldwide - Similar Threads - Microsoft Hijacks Necurs

Botnet

Botnet

Botnet

Microsoft Savety Scanner says first 9 infected files and ends with no infected files.

IoT botnet infects 100,000 routers to send spam

April 2018 update now installed on 84.2% PCs worldwide

Botnet

600 Millions PCs Waiting for Windows 10

Windows 10 Installed on 164 Million PCs