Generally found through porn downloads when you go to watch the video Media Player will ask you if you would like to download the codec to be able to play the video which is when this trojan comes in. It isn't ALWAYS porn that this is found in but its how we found it...