Security experts continue to track a low-risk trojan that takes advantage of a recently patched critical vulnerability, the second Windows flaw to be exploited since Redmond released its August security update.