Disagree all you want, but once a box is compromised, it is compromised.
You can never really know what's happened on the box, and removing the
obvious sign that the box is compromised is curing the symptom, not the
ill. That's not actually a fix, though I fully expect that someone here
will argue otherwise.
If this is so effective, wouldn't it have been a better idea to work with
the folks at irc.vel.net to do this on their end? Global benefit and
all, AND it would not be stealing someone else's domain name in order to
do this.
... JG