I recently experienced a rogue dhcp problem started by a virus. The problem I think I would have with DHCPLOC.EXE is that it identifies good or bad servers based on IP number. This malware spoofed the IP number of our valid DHCP server. I was hoping there would be a tool (Windows) that would identify a valid server using the mac address of the dhcp helper in each segment.