A very good video from Sophos on DNSChanger:

Roger