Nope, it doesn't use 'DNS' changing as mentioned by some this week. Maybe a little confusion with the webinjects.

It has however changed slightly for persistence in the fact it now uses the startup folder to copy the loader into.