Hello Everyone,
With malware such as DNS changer and others that infect a machine and re-direct traffic to a different DNS server you can implement simple rules ahead of time to stop the traffic in the first place see my latest video on how to accomplish this
In the video, I am using untangle but the theory works for any firewall