The executable e-deklaracje-wtyczka.exe, “Wtyczka e-Deklaracje do programu Adobe Reader/Acrobat ” has been detected as malware by 9 anti-virus scanners. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. Infected by an entry-point obscuring polymorphic file infector which will create a peer-to-peer botnet and receives URLs of additional files to download. The file has been seen being downloaded from www.finanse.mf.gov.pl.