Microsoft applies 'surgical sinkhole' to strangle botnet installed on new PCs