AVG Virus Scanner Removes Critical Windows File

Yesterday the AVG virus scanner accidentally marked User32.dll as a virus.



Since this is a critical windows component, it has caused many machines not to boot. Two of our XP machines experienced the issue here, but it has not seemed to have bothered our Vista installs.

This happened because their scanner contained an incorrect virus signature that led it to think that user32.dll contained the Trojan Horse PSW.Banker4.APSA. AVG then prompted to delete the file (Heal). Luckily we did not do that :)

If you are running AVG, and you deleted the file, you will need to run system recovery or boot from a CD like BartsPE and restore it from c:\windows\system32\dllcache

Within a few hours AVG updated their signatures, and it no longer has the incorrect entry.Popularity: 1%

Written by Steve Wiseman. Read more great feeds at is source WEBSITE
2 comments.
Read more articles on otherSoftware.

• [+] Digg: Feature this article
• [+] Del.icio.us: Bookmark this article
• [+] Furl: Bookmark this article

Related articles

• Power Pack 3 instructions for users running pre-release versions (November 24th, 2009)
• Centralize and share your digital content with Windows Home Server (November 24th, 2009)
• Set a local account’s password – remotely (November 24th, 2009)
• Look for the logo this holiday (November 24th, 2009)
• Razorfone: a conceptual Windows 7 & WPF-powered multi-touch phone retail experience (November 23rd, 2009)