Variants of the Rinbot worm are exploiting the Windows Server DNS Service vulnerability, researchers said today.