If you think back a year or so ago there was a modified version of Zeus that was aimed at .mil and .gov, it is sole purpose was to hover up .doc and .pdf files from a users work environment (ie it was not trying to escalate privileges or other owning activities).