"windows installer" problem

the pc (running vista) of the company president here keeps getting this pop-up:

Attachment 12169

this one refers to a "tray/app" disk but i've seen another one refer to "market research" one. he swears he doesn't install anything but i know he does (he has four desktop icon shortcuts to dropbox, a "post-it" creator, etc and god knows what else).

i've looked in the programs folders but nothing that jumps out at me. windows and virus update are current. i've threatened to do a disk wipe and reinstall windows, etc but that would take his pc our of commission for a day or two. he, of course, objects.

has anyone seen this or have any idea what it might be?

thanks in advance,

terry

Follow the instructions for malwarebytes here
http://discussions.virtualdr.com/sho...d-4-28-2013%29
and post the log in this thread.

Do yourself a big favor, go into Settings and set the drop downs like you see in the attachment. I got a nasty reminder yesterday when over 1200 were found. Set that up and did a rescan. Much faster.

i'll go ahead and get the logs.

i dl malwarebytes on his machine a while ago to remove something else he had dl. it was the trial version. maybe it's time he paid for the full version.

i just looked ... malwarebytes is only $25 unless i'm reading it wrong. would it be better if i just bought it and ran it rather than have ppl here poring over the logs to help me?

Buying the full version adds active protection. It does not change the effectiveness of the scan.
http://www.malwarebytes.org/free/

i'm currently on his machine running mbam. would the full version stop or at least flag any malware in real time? that would sure help.

Quote:

---

would the full version stop or at least flag any malware in real time?

---

Yes. Did you look at the link I posted? It compares the free and pro versions.

Quote:

---

Real-time protection
Detects new and unknown malware threats.

---

sorry, midknyte. i didn't scroll down to the comparison. i just went followed the links at the top of the page.

i finally got the files from mgam & dds. i'll post them separately.

Post the logs
http://discussions.virtualdr.com/sho...s-amp-dds-logs