"Digital certificates are required for connection to the RRP service, but user ID and passwords are required to initiate a session, " explains Rick Wesson, an IETF member and a senior software engineer at Alice's Registry Tools.

CNN: Is domain name system vulnerable to slamming?

Once inside, many programs alter the registry keys that are checked during each start-up sequence, allowing the malicious software to be re-installed after a system has been remediated.

FORBES: Is anyone safe? Spate of incidents raises security concerns