Help determining what to do with files

[chikbrite]

New to group. I asked this question in the wrong forum. Hope this is the
right place now to ask it!

I'm running Windows Vista Home Premium 6.0.6000 Build 6000, Microsoft
Money 2077 Home & Business v 16.0.150.1303 and AVG Internet Security 7.5.

On the 14th, AVG sent four files to the virus vault, two of which were
MNYCoreFiles\iofd.tlb and MNYCoreFiles.BAK . . . \iofd.tlb and two
related to the registry (I think). These files remain in the virus vault
and I have since used Microsoft Money and haven't encountered any
problems. (I'm assuming MNYCoreFiles relates to MS Money.

AVG classified the files as a virus, WIN32/PolyCrypt.

Couple of questions, should I remove the files from the virus vault or
restore them? I don't know what the files functions are, would restoring
them take Money back to what it was on the 14th?

I've contacted AVG and they've responded but I'm seeking help here on
this forum before I follow AVG's suggestion.

Thanks,
Kay

 

[Malke]

chikbrite wrote:
> New to group. I asked this question in the wrong forum. Hope this is the
> right place now to ask it!
>
> I'm running Windows Vista Home Premium 6.0.6000 Build 6000, Microsoft
> Money 2077 Home & Business v 16.0.150.1303 and AVG Internet Security 7.5.
>
> On the 14th, AVG sent four files to the virus vault, two of which were
> MNYCoreFiles\iofd.tlb and MNYCoreFiles.BAK . . . \iofd.tlb and two
> related to the registry (I think). These files remain in the virus vault
> and I have since used Microsoft Money and haven't encountered any
> problems. (I'm assuming MNYCoreFiles relates to MS Money.
>
> AVG classified the files as a virus, WIN32/PolyCrypt.
>
> Couple of questions, should I remove the files from the virus vault or
> restore them? I don't know what the files functions are, would restoring
> them take Money back to what it was on the 14th?
>
> I've contacted AVG and they've responded but I'm seeking help here on
> this forum before I follow AVG's suggestion.

Why don't you let us know what AVG suggested?


Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

 

[Anteaus]

I'm guessing that perhaps these files were infected by a PE infector, which
inserts code into the spaces in executables. .tlb filesare apparently OLE
containers.

Since many software suites that use .msi installers are self-repairing, this
may be why deleting the files didn't stop Money from working, when it noticed
the missing files it replaced them from the original .msi package.

Advice woudl be NOT to put the files back if everyting is working if you do
so you may reintroduce the virus.