AV program tries to delete core Windows file

sjb007 · 11-13-2008, 03:12 AM

Users of AVG's virus scanner received a shock earlier this week when the program instructed them to delete a core file needed to run Windows.

AVG mistakenly believed the file, called "user32.dll," contained the Trojan Horses PSW.Banker4.APSA or Generic9TBN, according to Security and The Net.

Users were instructed to delete it, which caused their computers to jump into an endless loop of reboot cycles. Oops! The only way out of this is to boot the computer from the original Windows CD and run the repair option.

AVG is wildly popular with users because of the free version it offers to home users. However, this is not the first time that AVG has had a problem with user32.dll. Last year, AVG alerted users that user32.dll had been"changed" and could be infected. At the time, the program did not recommend any action, but did cause users to post a frenzy of worried messages on some Internet forums.

Earlier this month, AVG was also registering a false positive on ZoneAlarm, another security product.

AVG says it has fixed the current user32.dll problem and apologised for the mishap on its forum. PC World reviewed AVG 7.5 last year, and noted that the program put the user in charge of too many decisions. Of the 10 programs we tested, AVG had the worst proactive protection.

Full article here - http://www.techworld.com/news/index....&NewsID=106969

3ncor3 · 11-13-2008, 04:00 AM

Thank you for the info, i stayed away from avg long ago when it wouldnt delete from my pc.

11-13-2008, 03:12 AM	#1 (permalink)
sjb007 Analyst, Security Team Join Date: Dec 2007 Location: Lincoln UK Posts: 2,275 OS: Windows 7 Premium x64 My System	AV program tries to delete core Windows file Users of AVG's virus scanner received a shock earlier this week when the program instructed them to delete a core file needed to run Windows. AVG mistakenly believed the file, called "user32.dll," contained the Trojan Horses PSW.Banker4.APSA or Generic9TBN, according to Security and The Net. Users were instructed to delete it, which caused their computers to jump into an endless loop of reboot cycles. Oops! The only way out of this is to boot the computer from the original Windows CD and run the repair option. AVG is wildly popular with users because of the free version it offers to home users. However, this is not the first time that AVG has had a problem with user32.dll. Last year, AVG alerted users that user32.dll had been"changed" and could be infected. At the time, the program did not recommend any action, but did cause users to post a frenzy of worried messages on some Internet forums. Earlier this month, AVG was also registering a false positive on ZoneAlarm, another security product. AVG says it has fixed the current user32.dll problem and apologised for the mishap on its forum. PC World reviewed AVG 7.5 last year, and noted that the program put the user in charge of too many decisions. Of the 10 programs we tested, AVG had the worst proactive protection. Full article here - http://www.techworld.com/news/index....&NewsID=106969 __________________ If we have helped you then please consider donating Proud Member of ASAP & UNITE Since 2007

11-13-2008, 04:00 AM	#2 (permalink)
3ncor3 Registered User Join Date: Nov 2008 Posts: 5 OS: fedora,ubuntu,xp sp2/sp3,xp X64	Re: AV program tries to delete core Windows file Thank you for the info, i stayed away from avg long ago when it wouldnt delete from my pc.