Thanks for idea, but it’s a link that downloads an installer that then downloads the right version of program (32 or 64bit, very common now) NIS scanned it when down loaded on both a 32 and 64 bit W7 PC's.
It’s only been a problem on the 64 bit and not at all on the 32bit. I have scanned with Malwarebytes and Spybot locally and did a Trend online scasnn. Only NIS found anything and as said before the two dll it guaranteed wire passed as OK by VirusTotal. It’s NIS doing false positives again and it’s very difficult to find how to report then.