Fixed it by running AVG in a custom scan, just selecting that folder. It found a trojan horse, 2807.exe, and healed it. It didn't say what folder it was in, and the scan results flashed by too quickly to read. The results file says it is now healed so I'll trust that!
Thanks for the pointers anyway.
AGV is really good, and free too