Kotik said:

We used the public exploit to generate a specially crafted page.

MS said:

Microsoft is concerned that this new report of a vulnerability in Internet
Explorer was not disclosed responsibly, potentially putting computer users
at risk. We continue to encourage responsible disclosure of vulnerabilities.
We believe the commonly accepted practice of reporting vulnerabilities
directly to a vendor serves everyone's best interests. This practice helps
to ensure that customers receive comprehensive, high-quality updates for
security vulnerabilities without exposure to malicious attackers while the
update is being developed

http://www.microsoft.com/technet/securi ... 06267.mspx (http://www.microsoft.com/technet/security/advisory/906267.mspx)

illwill code:

http://illmob.org/0day/msdds.dll_deactivator.rar

(not tested)

Yea M$ concered my ass. They've been working with vuln people for ages, and never do they give the proper credit to the vuln finders, even in some cases where they spend countless hours helping them patch. They wonder why people are starting to not help them anymore? Don't bite the hand that feeds you.

thanks for the links.
I'd like to see M$ patch code to find the string "illwill R0cKs!!" bha....