How can you get to it with out knowing the address?
He obviously got to it from the link I supplied earlier (which was cached by Google).
But also obviously, their webmaster was instructed to remove the link from the products page - where a surfer customer could actually have access. Apparently, he was too lazy/incompetent to delete the previously linked file altogether.
Do NOT be surprised if this is deleted tomorrow. It's not hard to see where this is going.