Hi Pondus and Zyndstoff,

This adds to the suspicion: http://vscan.novirusthanks.org/analysis/20d3f7c94b5265c14d05554c50eb8fa1/bWVkaWFwbHVnaW5zZXR1cC1leGU=/

and jotti’s: http://virusscan.jotti.org/en/scanresult/3eae48334dfd051c642d6e31beef4c7bdf26c62c

virustotal at three detections now and ThreatExpert reporting:
http://www.virustotal.com/file-scan/report.html?id=dccf714d5a272fe6e52db6dd26c5279cea46570b295f70b0a1d0e112a531b518-1302351204

http://www.threatexpert.com/report.aspx?md5=20d3f7c94b5265c14d05554c50eb8fa1

So it is coming like our friend Pondus predicted,

polonus

P.S. for the browser BHO PlugIn, see: http://www.google.nl/search?sourceid=chrome&ie=UTF-8&q=0xD7DC7DFE31FA56BBF486E947D89C68F3

D