[kahawe]

> A reboot of the infected system would wipe the binary completely and...

Why in the heavens would you reboot obviously badly administrated machines quite literally half across the globe if you otherwise took every initiative to not harm the target machines and keep your foot print as small as possible? (lowest possible priority, watchdog) Killing the process and removing the files should have been more than enough and you just don't know what a reboot could do to these systems; regardless of how much the admins of those machines are to blame.

[smcl]

It doesn't say that he reboots the compromised machines, just that if the sysadmin happens to reboot then the bot would disappear.

[donbox5]

I hope they did not infect any medical device e.g. a ventilator.

[kahawe]

Doh, now that you point that out... I misunderstood it. Thank you.