AV Vendors are starting to add protection:
W32.Grum - Pretends to be IE 7 Downloadhttp://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9015142http://www.sophos.com/security/analyses/w32gruma.htmlhttp://www.f-secure.com/v-descs/trojan-proxy_w32_grum_a.shtml