Cyber crime gangs in China are penetrating the hard disk recovery cards on computers in Internet cafes. Using a combination of zero-day flaws, rootkits and ARP spoofing techniques to steal billions of dollars worth of online gaming credentials. Five generations of the Win32/Dogrobot malware family have perfected the novel rootkit technique to hijack System Restore on Windows. According to data presented by researcher Chun Feng, the Dogrobot family has caused more than USD$1.2 billion in losses to Chinese Internet cafes.
Source: https://threatpost.com/dogrobot-malware-penetrates-system-restore-windows-092409/72213/