Looks like Secunia's MS03-032 "vulnerability in the wild" actually exists
The MS03-032 vulnerability is also being exploited by Delude which is currently hijacking Google's Homepage and responding with: Are you trying to get to Google?.