Block trafficconverter (dot) biz as soon as possible
From http://www.f-secure.com/v-descs/worm_w32_downadup_a.shtml and http://www.ca.com/us/securityadvisor/virusinfo/virus.aspx?id=75911 and http://isc.sans.org/:
Active exploitation of MS08-067 vulnerability.
Block trafficconverter .biz ASAP