"windows installer" problem

[terryZ]

the pc (running vista) of the company president here keeps getting this pop-up:

Attachment 12169

this one refers to a "tray/app" disk but i've seen another one refer to "market research" one. he swears he doesn't install anything but i know he does (he has four desktop icon shortcuts to dropbox, a "post-it" creator, etc and god knows what else).

i've looked in the programs folders but nothing that jumps out at me. windows and virus update are current. i've threatened to do a disk wipe and reinstall windows, etc but that would take his pc our of commission for a day or two. he, of course, objects.

has anyone seen this or have any idea what it might be?

thanks in advance,

terry

[Train]

Follow the instructions for malwarebytes here
http://discussions.virtualdr.com/sho...d-4-28-2013%29
and post the log in this thread.

Do yourself a big favor, go into Settings and set the drop downs like you see in the attachment. I got a nasty reminder yesterday when over 1200 were found. Set that up and did a rescan. Much faster.

[terryZ]

i'll go ahead and get the logs.

i dl malwarebytes on his machine a while ago to remove something else he had dl. it was the trial version. maybe it's time he paid for the full version.

[terryZ]

i just looked ... malwarebytes is only $25 unless i'm reading it wrong. would it be better if i just bought it and ran it rather than have ppl here poring over the logs to help me?

[Midknyte]

Buying the full version adds active protection. It does not change the effectiveness of the scan.
http://www.malwarebytes.org/free/

[terryZ]

i'm currently on his machine running mbam. would the full version stop or at least flag any malware in real time? that would sure help.

[Midknyte]

would the full version stop or at least flag any malware in real time?

Yes. Did you look at the link I posted? It compares the free and pro versions.

Real-time protection
Detects new and unknown malware threats.

[terryZ]

sorry, midknyte. i didn't scroll down to the comparison. i just went followed the links at the top of the page.

i finally got the files from mgam & dds. i'll post them separately.

[Train]

Post the logs
http://discussions.virtualdr.com/sho...s-amp-dds-logs