Does DNSWatch get rid of malware when an infection is made?

Sometimes. It depends on the malware.

In the case of Locky ransomware, we stop the distribution. By interrupting the distribution, the ransomware never makes it to the victim. The code used to infect the victim exits without doing anything harmful. We use this to provide you visibility on what was about to happen and to whom.

For Poison Ivy, it contains a killswitch. We keep the malware online until you are ready to kill it.

For Zeus, it does not contain a killswitch. We provide you insights about the victim and your team needs to clean the malware off.