That's pretty commonplace to clean up worms and the like. Once security professionals decompile the code enough to figure out where the control mechanism is and how it works, they will take control of it and use its own methods to get rid of it.