The AVG logs don't say much, just shows the time I ran the .exe containing the malware and me blocking or healing it. Must be something on my PC that targeted the cncnet.exe, then targeted the installer when I donloaded the new one.
I will reinstall windows and upgrade to 10 on the weekend - and check out Malwarebytes; thanks for the tip.
H3ll