AVG Update Inadvertently Cripples Windows XP
Posted 11/12/08 at 09:06:05 AM by Paul Lilly
Thanks to a borked update, some PC users running AVG's free antivirus were in for a long and frustrating weekend. The virus definition update, which was released on Saturday, erroneously detected the "user32.dll" file for the Trojan Horse PSW.Banker4.APSA instead of recognizing it as a critical Windows component. Once the scanner went active, users found their AVG software recommending that they delete the quarantined file. Doing so caused systems to either stop booting or enter into a continuous reboot loop. Whoops!
The misinformed update affected both AVG 7.5 and AVG 8.0 installations on Windows XP. Vista users appear to be in the clear, though a spattering of user comments around the web have indicated otherwise. In any event, another update has corrected the error. For those who already deleted the critical system file, AVG is providing step-by-step instructions on how to restore your system back to a working state. Whether or not it restores your faith back in the program is another question altogether.
Hit the jump and let us know what security software you're using.

Image Credit: Securityandthenet.com
Oppps!!
Submitted by ShuTDowN on Thu, 09/03/2009 - 10:47pm
Nice one!! atleast the IT will become more busy...
Clear your computer of all the same bugs.
Submitted by jesicajame on Sun, 05/03/2009 - 2:04am
When you are searching for antispyware there is one that you can always depend on, it’s called Search-and-destroy Antispyware. The antispyware solution from Search-and-destroy can provide you with a scan that can find and clear your computer of all the same bugs that the more expensive scans can a much lower price. You can’t beat that, keep your computer running great for less. Visit their site at http://www.Search-and-destroy.com to download this scan and get all the benefits it has to offer. If you’re like me, it will be the best decision you made in a long time.
Time to install new Anti-Virus Software
Submitted by timmyw on Wed, 11/12/2008 - 8:01pm
I installed AVG after reading about it in a no less prestigious journal than MaximumPC. My faith was shaken after a false positive in the Open Office 2.4 Installer. This pretty much makes me think it is worthless. I've never had a virus screw up my machine so I couldn't at least boot, I would expect any reasonable anti-virus software not to kill my machine. What does every machine they tested it on not have a user.dll? I know that no scanner will be perfect, but Open Office is hardly obscure and finding a false positive in the operating system is just plain lame.
Now what gang. I'm deleting AVG right now.
Time to shop for a new Anti-Virus Software
Submitted by timmyw on Wed, 11/12/2008 - 7:58pm
I installed AVG after reading about it in a no less prestigious journal than MaximumPC. My faith was shaken after a false positive in the Open Office 2.4 Installer. This pretty much makes me think it is worthless. I've never had a virus screw up my machine so I couldn't at least boot, I would expect any reasonable anti-virus software not to kill my machine. What does every machine they tested it on not have a user.dll? I know that no scanner will be perfect, but Open Office is hardly obscure and finding a false positive in the operating system is just plain lame.
Now what gang.
LOL
Submitted by K0BALT on Wed, 11/12/2008 - 5:55pm
LOL. I'm glad i swtiched to Avast! a long time ago.
I thinks this is affecting a school compter....
Submitted by Devo85x on Wed, 11/12/2008 - 1:46pm
In one of my classes (yes unfortunatly we are using AVG) one of the computers was getting this message, and I got on another one today and it was doing (as it says above) a continuous reboot... the + side? My teacher is teaching the "Computer OS" students how to reinstall lol and a friend of mine is working on an image from another computer for them (the class I am in is not on the schools network for "educational reasons"... lol the funny thing is, all we do in that class is play Unreal Tournament (the first one) and Red Faction)
AVG Free is running on both
Submitted by horzo on Wed, 11/12/2008 - 1:46pm
AVG Free is running on both Vista and XP (32 bit) machines in my house. No problems that I noticed.
I switched to NOD32 on my games box a couple of months ago. It's much more efficient than AVG. Worth the $40/year.
My friend called me today
Submitted by forumdude123 on Wed, 11/12/2008 - 1:45pm
My friend called me today saying that his computer is giving him a BSoD. I asked him when did it happen, and he said "after running my virus software", which was AVG 8!! I decided to come here first, and behold, this article was here. I restored his system for him though, cause his lucky a** backed up his data to acronis true image yesterday.
Funny
Submitted by wk on Wed, 11/12/2008 - 11:11am
Today after update, Avast 4.8 Home edition (free) alarm that "WinRAR.exe" that I used for 2 years is a virus.i wasn't able to run winrar until i excluded from Avast scanning. And i was lucky enough i changed from AVG 8 to Avast last month.
MPC is my home page
1 word,
Submitted by Talcum X on Wed, 11/12/2008 - 10:51am
DOH!
***********
Every morning is the dawn of a new error.
"In Ireland, there are more drunks per capita than people." - Peter Griffin
I keep changing, whenever a
Submitted by Wildebeast on Wed, 11/12/2008 - 10:25am
I keep changing, whenever a subscription ends (renewal prices are usually 2x what I paid for the original), but I'm back with Norton for the moment.
Last month, it suddenly decided that a file that I've had for 5 years is a trojan. It's been scanned 200 times, 30 of them by Norton, but now it's a trojan...
These mistakes are funny. It's certainly better than having an unidentified infections mess your computer up, before you see the problem...
AV Used
Submitted by KOMMANDER on Wed, 11/12/2008 - 9:03am
I got in on a 3 yr free deal for Trend Micro Internet Suite, and have been using it for the last 3 weeks. I was having some sluggishness with XP caused by AVG and my spyware programs and once I switched it went away. Over all I have been pleased with it. KOMMANDER
From the original article:
Submitted by sirphunkee on Wed, 11/12/2008 - 8:49am
From the original article: "The AVG spokeswoman claimed that only users running Dutch, French, Italian, Portuguese and Spanish language versions of Windows XP were affected."
NOD32 Here
Submitted by SpazzAttack on Wed, 11/12/2008 - 8:31am
I use NOD32 for my anti virus. I love it. You never know its running until an update is installed or a threat is detected. I use Windows Defender for the rest. Auto play is also disabled. I'm running Windows Vista x64.
Was not affected...
Submitted by ProtoJMB on Wed, 11/12/2008 - 8:14am
I wasn't affected by this, though I am running 64 bit XP. Maybe that had something to do with it?
Yeah that's too bad, though AVG 8 overall as of late has been kind of quirky. Not gonna switch to AVAST though, as I dislike it's UI and overall functionality.
And YES even in Vista it's a good idea to have an Anti-Virus. You can never be too careful on today's internet.
Oooops
Submitted by metric_inch on Wed, 11/12/2008 - 7:53am
I'm glad I left AVG after version 7.0 and switched to Avast on my XP machine.
I hated the changes they made to AVG 7.0 free edition including that ridiculous google search result scanner. Who thought it would be a good idea to scan every single link in case the user clicked on it. The moment I saw that I had to disable the firefox addon AVG installed without my permission. Then after 1 day of annoying popups from AVG I simply uninstalled it.Last month at work I had a scare with McAfee detecting wm_hooks.dll (from RealVNC) as a possible virus. Its a pain to talk a client thru ignoring the scary virus warning over the phone since I couldn't log into the PC. I'm lucky I didn't have it happen to 1000s of PCs like some other McAfee users.
On another note, is an Anti-Virus needed in Vista?
I have UAC turned on, along with Windows Defender.
In the past my wife has gotten our XP machine infected 2x, both due to user error. Both times it was something stupid like "Download and run this .exe to view this locked myspace profile". The next time it was "download and run this .exe to view this movie clip".
Once was when I was running AVG and it failed to stop the virus install, but told me about it after the fact. The next one was Avast failing to stop the virus install but telling me about it after the fact.
Both times I didn't need the anti-virus software telling me I had a virus because it was so obvious.With UAC, Windows Defender, Auto-Updates running and Autoplay turned off I don't know how I would get infected unless its a)user error, which anti-virus has shown worthless against to me or b)an unknown/unpatched vulnerability, which I also think the anti-virus software would fail to stop the install like in the past.
You know, I feel horrible
Submitted by Tekzel on Wed, 11/12/2008 - 7:38am
You know, I feel horrible about finding this hilarious. Yet, I do. Shame on me. :(
I like AVG though. Shame this happened, but I guess it will teach them to be a weeee bit more careful when pushing out those updates. Too bad it couldn't have happend to the travesty that is McAfee instead.
Too much drama with AVG. At least 1 false alarm per install.
Submitted by bcweir on Wed, 11/12/2008 - 12:55pm
MaximumPC needs to stop including this garbage on their otherwise excellent CD's until the software matures. I am always getting at least one false alarm (and it's always something different, and always something that hasn't triggered an alert before).
Feature
Review
Feature
Feature
Feature





