Hi Pondus and Zyndstoff,
This adds to the suspicion: http://vscan.novirusthanks.org/analysis/20d3f7c94b5265c14d05554c50eb8fa1/bWVkaWFwbHVnaW5zZXR1cC1leGU=/
and jotti’s: http://virusscan.jotti.org/en/scanresult/3eae48334dfd051c642d6e31beef4c7bdf26c62c
virustotal at three detections now and ThreatExpert reporting: http://www.virustotal.com/file-scan/report.html?id=dccf714d5a272fe6e52db6dd26c5279cea46570b295f70b0a1d0e112a531b518-1302351204
http://www.threatexpert.com/report.aspx?md5=20d3f7c94b5265c14d05554c50eb8fa1
So it is coming like our friend Pondus predicted,
polonus
P.S. for the browser BHO PlugIn, see: http://www.google.nl/search?sourceid=chrome&ie=UTF-8&q=0xD7DC7DFE31FA56BBF486E947D89C68F3
D