What extension was it? Like I said, as far as I know, none of the available extensions use any .dll's that would be put anywhere but in the carrara directory ( a plug-in is really a dll ). At any rate, if you want to know, reinstall the plug-in, and see what files are extracted. I can't imagine any of the extensions having viruses, because viruses can't really attach themselves to an extension like an executable.