We use DD-WRT to overwrite firmware on older routers and run through secure DNS servers, such as Comodo. Already wiped newer router firmware and restored it--we keep current copies downloaded only from the manufacturers' sites.

Never wait for instructions from CERT, FBI, or any other agency--once these things are discovered, its' already too late and these agencies are only there to warn people and research the effects. Act right away if you can and make sure you always have good backups--an external usb 3 drive can be a wonderful thing for home users in the case of a PC compromise. For routers, it's a different approach as you've read here and elsewhere (thank you to the author).

Wiping the router and restoring firmware, then configuration from a saved .cfg file seems to be the most desirable option. It would be nice if the router manufacturers set up a website with simple "1-2-3" instructions to reset and reload their branded products.