Information about yet another trojan or virus, unless is it widely deployed in the wild. Yours truly, Elias Levy a.k.a. The details of security vulnerabilities should be available to everyone. Vendors are pressured into providing security fixes quickly. Programmers and system designers can learn from others mistakes.
Users can identify similar vulnerabilities on systems other than the original.
Vulnerability details should be restricted to vendors and a few security experts. Contact the product's vendor or maintainer and give them a one week period to respond. If they don't respond post to the list. If you do hear from the vendor give them what you consider appropriate time to fix the vulnerability. This will depend on the vulnerability and the product.