Notice
This is a Low-Profiled Threat Notice for Exploit-PDF.b.gen & Obfuscated Script.f!58

Justification
Exploit-PDF.b.gen & Obfuscated Script.f!58 have been deemed Low-Profiled due to media attention at http://www.theregister.co.uk/2009/05/19/gu...isoning_update/.

Exploit-PDF.b.gen & Obfuscated Script.f!58 are associated with the "Gumblar" threat in the article at theregister.co.uk.

Read About Them:
Information about Exploit-PDF.b.gen is located on VIL at: http://vil.nai.com/vil/content/v_152749.htm
Information about Obfuscated Script.f!58 is located on VIL at: http://vil.nai.com/vil/content/v_157009.htm

Detection
Exploit-PDF.b.gen was first discovered on October 17, 2008 and detection, for this particular variant, was added to the 5621 dat files (Release Date: May 20, 2009).
Obfuscated Script.f!58 was first discovered on May 20, 2009, and detection was also added to the 5621 dat files (Release Date: May 20, 2009).

To stay updated and protected download the latest dat files from http://www.mcafee.com/us/downloads/index.html

If you suspect you have Exploit-PDF.b.gen & Obfuscated Script.f!58 or Exploit-PDF.b.gen & Obfuscated Script.f!58, please submit a sample to http://www.webimmune.net

Risk Assessment Definition
For further information on the Risk Assessment and Avert Labs Recommended Actions please see: http://www.mcafee.com/us/threat_center/out...assessment.html