If you register Domains with GoDaddy or anyother Registrar then you have control on Parked, Hosted or Custom name servers. Since I use GD as a Registrar but not a host I always am setting custom name servers. So this attack just allowed me to switch the NS to Parked for a few minutes. Stop it. But then a single check after this post and at 1am a restart this time with a fix in the attack which tells me alot about the attackers and their methods of exploit.

So it was a Temp Fix at best...But damn see more if I didn't try to find an easy Turn Off button :)