You can find the full details of both over at ITExaminer, which is a summary of the findings from Intego. The ARDAgent one sounds particularly nasty.

"The first is installed a the heart of a poker application and the second, takes advantage of a hole in the ARDAgent."