Two Dutch brothers are charged with operating the Shadow botnet, which infected upwards of 150,000 computers. After the botnet takedown was secured, The Dutch High Tech Crime Unit enlisted the help of Kaspersky Labs to help dismantle the network.
The Russian lab not only wrote up instructions for removing Shadow, but used Shadow itself for notifying users that their computers were infected. Assuming said user would believe Shadow (and why not, knowing that they downloaded it in the first place) the notification also included instructions for getting rid of the infection.
