Seems like most aren't PDF reader exploits, but are things masquerading as PDF files (links to open IE to an exploit site, exes with a PDF icon, etc.)

This is an area where antivirus software like Kaspersky shines - noticing things that are "obvious" that a user might nevertheless not notice 100% of the time.