Yes... I don't know what you all are thinking. Just downloading and opening an exe file... all in the pretext of getting an address. The guy hasn't uploaded the source code for a reason. And malicious code can be anything... key logger to get your passwords, commands to do whatever with existing opened tabs including your mail account, facebook and bitcointalk accounts.... scan for other wallets in your system, the list is endless and they are undetectable by virus scanners because its not a generic known virus in their database. The fact that the dev is active and not addressing this issue further confirms this. I have reported this to the mods... not sure if they will do anything though.