This Trojan may be dropped by other malware. It may be downloaded unknowingly by a user when visiting malicious Web sites.
It is a specially crafted .PDF file that exploits a known vulnerability in Acrobat Reader 8.1.1 or earlier versions. The said vulnerability causes the application to crash and could potentially allow a malicious user to take control of the affected system. More information about the said vulnerability can be found on this page.
It drops malicious files. It then executes the dropped file(s). As a result, malicious routines of the dropped files are exhibited on the affected system.
It also drops a non-malicious .PDF file in the current user's Temporary folder. The said .PDF file uses a random file name. This routine is done to trick users into thinking that they are viewing a normal .PDF file.


More...