threat

[Tom Roberts]

FYI - Mcafee just detected a threat on the 2 files used to update our accounts.  I did a search but couldn't find out what the threats were. 

[Tom Roberts]

I just tried to run MSMoneyQuotes.exe and it won't run - Mcafee msg below. Any ideas ? I will be offline for the next 24hrs.

[Cal Learner]

Scanning
1 file, 249856 bytes (244 KiB)

SHA1                                                                                      Size  Name
----------------------------------------                                          -------------  ------------
5734c615bc1b12258ecce125678ea33eaf086af3        249856  MSMoneyQuotes.exe

SHA256 :              aedfb977e33e56042f4fff83da6cea46f8a26a4f86884016a50a1a69b1f57f6e

My file is dated 09/20/2023

If your SHA1 or SHA256 matches mine, I think that would be a false postive.

[Rakesh Shah]

Virus Total says 5 of 72 vendors find this malicious, but none of the major ones. Oddly, McAfee isn't even listed.

https://www.virustotal.com/gui/file/aedfb977e33e56042f4fff83da6cea46f8a26a4f86884016a50a1a69b1f57f6e

Note, always be wary of random links. You can always go to Virus Total directly and put in the SHA256 or the file directly.

[Tom Roberts]

ok Cal & Rakesh, the msmoneyquotes.exe disappeared so i downloaded it again. I guess expectantly, the SHA1 AND SHA256 are identical to what Cal posted. I've never used this service before so will have to read up to see what these two file properties have to do with protection.

Re the 5 of 72 having flagged it, I wouldn't expect any to flag it. The program is legit.

thanks

--
You received this message because you are subscribed to the Google Groups "Microsoft Money" group.
To unsubscribe from this group and stop receiving emails from it, send an email to microsoft-mon...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/microsoft-money/c608b8f4-859f-4392-a697-5c09247f5362n%40googlegroups.com.

[Cal Learner]

" I've never used this service before so will have to read up to see what these two file properties have to do with protection."

SHA1 and SHA256 are more secure versions of checksums/hashes. If you check one or the other and it matches, it simply means that we are looking at identical files.  It does not mean that the files are good or bad, but that they are identical. I only provided both in case your tool that produced only hash value or the other.

There is another shorter hash function called MD5. In theory there could be two files that have the same SHA1 or even MD5 and are the same size that are different, in practice I don't think that happens. 

The method that you used did a character by character comparison, and that also showed the two files were identical. I would not worry further, but if you find hash algorithms interesting, take a look... so no need to worry... just read more if you want to.