 Now, regarding this new type of malicious document, so a PDF file that contains a Word document, an embedded Word document, which has a macros, a couple of people have asked me how this actually behaves when you open it with Adobe Reader, how it behaves so. I'm going to do this here in a virtual machine, here I have the malicious sample, so you open it, and then we can see here you have the taskbar and menu from Adobe Reader, but the rest of the page is not rendered, you still see the underlying desktop, but you have here an opened file menu, the file 5.doc will be saved to a temporary file and then opened, so Word will be launched to open the file when you click on OK, so let's do this. OK, and you see Word was launched and here we have the macros, but the macros are disabled here in this case, so they don't run automatically, but we can have a look here in Developer Visual Basic, here you can see the macros, for example here this module, here this one contains the obfuscated URLs, so that is how it works. The reason why it works like that is because of JavaScript inside the PDF, so there is JavaScript inside this PDF that launches this dialog. OK, now if you cancel here, you just get the PDF and the embedded file was not saved, but you can have a look here by clicking here on the paper clip, and then you see the files that have been embedded here, 5.doc, the embedded file, and you can save it from here or even open it from here. We are not going to do this, so it was because of JavaScript that this save and open dialog appears automatically, so let's have a look here. OK, so this is my template that I designed for 010 editor, here you have the object with the JavaScript, object 3 is the JavaScript, and if you take a look here you see this .export.data object, a name and a launch, and this is actually the instruction that will launch the dialog and open the Word document when the user says OK, and launch 2 instructs the export.data object function to save to a temporary file and then open it. If you change this here for example in 0, then a dialog will appear to save the file, but this file will not be opened automatically, so I can show you this. So I just modified the sample, let me open it here, and now you see we have a dialog to save, we can save this, but nothing is actually opened automatically.