[timschmidt]

A fairly prominent update service already runs from the domain microsoft.com Many machines come with it preinstalled.

[wolverine876]

The erroneous DNS change wouldn't help that sort of exploit. It just redirects attempts to contact microsoft.com to a local address, probably a router.

[timschmidt]

That's exactly what I said in the first post.