Sneakily this was an image rather than a Windows dialogue box so clicking anywhere on it, even the “cancel” button, got the download going. The download installed automatically and kicked off a tsunami of background downloading. The software was so sneaky that it tried to stop this traffic being seen by injecting it into the IE processes.
