• On TV.com: New TV sex symbol: Vintage black PORSCHE
November 11, 2008 11:24 AM PST

AVG update cripples some Windows XP systems

by Robert Vamosi
  • Font size
  • Print
  • 53 comments

On Tuesday an update for AVG 8 suggested that a Windows system file is a Trojan horse, and users who delete the file form the system could leave their Windows XP systems endlessly rebooting or unable to reboot at all. The problem only affects users of AVG 8 products running the Dutch, French, Italian, Portuguese, and Spanish language versions of Windows XP. AVG immediately sent out a corrected update to its customers, including those using the free editions of AVG.

A representative for AVG said, "AVG is actively working to remedy the problem some users are experiencing related to the most recent update to commercial and free versions of AVG 7.5 and AVG 8.0 in some languages. A number of users who installed the update mistakenly received a warning that the Windows system file user32.dll product version 5.1.2600.3099 was infected with a Trojan virus and were prompted to delete a file essential to the operation of Windows XP."

In response, the Czech antivirus company has posted details and a fix tool on its site.

For users unable to use their Windows XP machines, AVG says they "should contact their AVG reseller or ask a friend to download the information and fix tool for them."

AVG has suffered some embarrassing glitches of late. Last month, an AVG update declared some ZoneAlarm firewall files to be part of a Trojan horse. In July AVG had to reconfigure its Linkscanner tool after various Web sites complained about the increased traffic as a result of the tool's proactive scanning for malware.

As CNET's resident security expert, Robert Vamosi has been interviewed on the BBC, CNN, MSNBC, and other outlets to share his knowledge about the latest online threats and to offer advice on personal and corporate security. Listen to his podcast at securitybites.cnet.com or e-mail Robert with your questions and comments.
advertisement
Click here!
Recent posts from Security
Microsoft patching zero-day Windows 7 SMB hole
RSA reveals details behind re-shipping scam
Expert says Adobe Flash policy is risky
Apple updates Safari for security
Microsoft probing Windows 7 zero-day hole
Security considerations for virtual environments
Eastern Europeans charged in payment processor hack
A child porn-planting virus: Threat or bad defense?
Add a Comment (Log in or register) Showing 1 of 2 pages (53 Comments)
by paul.saulnier November 11, 2008 11:41 AM PST
It's amazing that such a problem occur because people install anti-virus users use the software to specifically avoid this type of disruption caused by viruses.
Reply to this comment
by The_Decider November 11, 2008 11:58 AM PST
Use an OS that isn't so damn vulnerable and this becomes a non-issue.
Reply to this comment
by oassaf November 11, 2008 12:17 PM PST
and what operating system would that be? Its not Vista because apparently people think that its the worst thing since Hitler ( it actually is fine, unlike Hitler) or is it Mac? It couldnt be Mac though, because its only 'stable' since it has such a small usage base that it is no fun creating viruses for it.

I guess it must be the super popular Linux everyone is using these days.
by badmojo42 November 11, 2008 12:21 PM PST
so you are saying the virus software installed on your machine shouldn't have rights to all the files and folders of the OS? How is it supposed to scan and delete a potential virus? This could have happened to any OS. It is clearly all AVG's fault so don't put the blame on Microsoft.
by theantibush November 11, 2008 12:32 PM PST
LOL!!!

'nuff said
by The_Decider November 11, 2008 1:32 PM PST
Badmojo,

Huh?

I never said anything about access privileges.

My comment was entirely about using an OS that doesn't require AV software in the first place.
by The_Decider November 11, 2008 1:33 PM PST
Badmojo,

Huh?

I never said anything about access privileges.

My comment was entirely about using an OS that doesn't require AV software in the first place.

edit:

It is Microsoft's fault for making such a crappy OS that running AV software is necessary. The better OS's have no use for AV software.
by Lerianis November 11, 2008 10:21 PM PST
The_Decider, once again you are TOTALLY wrong. Those OS's only don't have viruses because it is NOT WORTH IT YET to make viruses for those systems. Let them get better than 20% marketshare..... you will see ********* of viruses for those systems.
by ralfthedog November 12, 2008 4:57 PM PST
Can you imagine the hacker cred you would get for writing the first working virus for OS X?
by wolivere November 13, 2008 9:08 AM PST
raift they do exist.

http://www.sophos.com/security/analyses/viruses-and-spyware/osxleapa.html
by dawillie November 14, 2008 3:34 PM PST
Opps here we go again extalling the virtues of Linux and Mac. I think it has to do with market share and the more popular, the more vulnerable. Look at what happens to P 2 P software. It is bug infested.

In any event the glitch was to do with AVG in some languages other than English.
by robertbasil November 11, 2008 12:24 PM PST
Stated above by oassaf: "or is it Mac? It couldnt be Mac though, because its only 'stable' since it has such a small usage base that it is no fun creating viruses for it."

The reason you stated above is EXACTLY the reason why I switched to OSX almost 2 years ago. I don't care WHY it is stable, only that it IS stable. :)
Reply to this comment
by theantibush November 11, 2008 12:35 PM PST
see my prev comment
by celticbrewer November 11, 2008 12:54 PM PST
are you talking about stability or security? Because I thought OSX was one of the most insecure OSes out there- even behind windows. Stability wise, I'd go with Linux. Security wise, either Windows or Linux.

Just wait until more tech-less sheep are on OSX and then the virus/malware writers will spend some time targeting that demographic.
by hunkyboi69 November 11, 2008 1:19 PM PST
OS X ain't stable mate...if you actually want to do anything apart from look like a ponce with an 'alternative' operating system, it becomes very unstable.
Apart from the fact Apple manages to break part of the system with every update, and took 4 point updates with Leopard to get sodding SMB working properly with a Win 2k8 file server without having a Kernel Panic due to the smbfs.kext module...Oh yes, OS X is great and VERY stable, if you use it for web browsing only, it's pretty much useless for anything else.

Open your eyes.

And as for security...hahahaha, it's a joke, it's wide open and has more holes than an uber large colander.

And guess what....I'm typing this on a Mac.
by arosania November 11, 2008 2:07 PM PST
*Sigh* Any OS is as stable as its user. I manage a 300+PCs network using either a Mac or a Win box. My personal preference is Mac, but I also run windows since v1.0. (Still have my copy... sometimes I create a VM just so I can run that).
Hunkyboi: I have the same SMB problem using Vista SP1 to access a win2k/2k3/2k8 server with loads of files. Moot point. Open YOUR eyes. Oh, and ANY OS has a lot of holes. Btw... *** is a ponce?
"Guess what... I'm typing this on a Mac" Yeah, sure. Whatever gets you through the night.
by pjhenry1216 November 11, 2008 2:20 PM PST
Then that reason is inherently faulty. If *everyone* followed that reasoning, it'd no longer be true.
by Dalkorian November 11, 2008 2:22 PM PST
by celticbrewer November 11, 2008 12:54 PM PST
are you talking about stability or security? Because I thought OSX was one of the most insecure OSes out there- even behind windows

----------------------------------------------------------------

You couldn't be more wrong my friend. Keep in mind OSX is built on Darwin, a variation of OpenBSD. The market share argument is a red herring, OS 9 had viruses and it had a much smaller market share than OS X does, which has NO VIRUSES TO DATE.

There is NOTHING in the world more insecure than winblows, as evidenced by the NEED for A/V software.

As for the stability argument, I'm writing this on my work Mini, which hasn't had a single kernel panic in so long I don't remember. When did 10.5 come out again? (I conned my boss into a new Mini with 10.5 right when Leopard came out and unsurprisingly, 10.5.0 did suffer some kernel panics. Most were resolved with the 10.5.1 update though, the rest were fixed with 10.5.2. Now I'm running the latest and greatest, 10.5.5, and it's been rock stable forever).
by terminalblue November 11, 2008 1:06 PM PST
yup...i got my desktop
Reply to this comment
by mssoot November 11, 2008 1:11 PM PST
Who cares about the fan boy cr*p. The fact remains AVG made a major blunder. Dont they test this stuff before they put it out for exactly this reason. Id be a very concerned if I was running this.
Reply to this comment
by hunkyboi69 November 11, 2008 1:20 PM PST
Exactly. I stopped using AVG a while ago and refused to use it again after it labelled something a trojan which clearly wasn't. I don't think they know what they are doing. I mean, surely a bit of simple testing will make sure that things like that don't happen....
by The_Decider November 11, 2008 1:35 PM PST
I would be concerned if I needed to run AV software.

Stop using software made by inept amateurs that need this nonsense to run somewhat safely.
by gabeheim November 11, 2008 8:26 PM PST
Every AV can have false positives. Hash collisions are rare, but they do happen. Remember you can't uniquely identify an object with 64, 80, 128, or even thousands of bits in a hash when the object could have millions or billions of bits.

The antivirus on my office PC thought an autorun for portable apps on my flash drive was a virus. Obviously a hash collision. The antivirus maker could test for hash collisions with common files (apparently, they didn't test the international versions of windows), but for every system file, there's a billion private user-created files they can't test.

For info: http://en.wikipedia.org/wiki/Hash_collision
by avatar45 November 11, 2008 1:45 PM PST
As has been said... Don't use AVG. I updated it once (free version) and it refused to do anything so switched back over to Avast! Problem solved...
and to all those saying that they don't want to run an OS that needs an AV well the ONLY reason it needs one wait till your fave OS becomes more widely known... Then we'll see if you need an AV to protect yourself ;)
Reply to this comment
by Dalkorian November 11, 2008 2:24 PM PST
Yup, we'll see. Notice the lack or worry in my voice as I say that.
by Helle533 November 11, 2008 4:40 PM PST
You?re perfectly right! I used AVG and avast! simultaneously a few years ago. And guess what? AVG found viruses which weren?t any and avast! were always faster than AVG.
I picked to keep avast! That?s simply the best! I had no problems since.
by Software Tester November 11, 2008 4:01 PM PST
Yup, Use Panda,Kaspersky or even McAfee. Enough Said.
Reply to this comment
by andrew5859 November 14, 2008 1:11 PM PST
By far, Panda Anti-Vurus is the best, I've been using it for the last 8yrs.and it doesn't slow down the OS like McAfee and Nortons does. On the other hand, AVG does have flaws in it that do need to be fixed. As I've read through a lot of these statements from everyone, it's quite clear that everyone has their own preference as to what OS's you use and anti virus. I have personally worked with McAfee and Nortons and they both have a tendency to slown down the OS quite considerably and only have updates, maybe once a week (if you're fortunate), Panda has updates every day and prtected my systen (Windows XP Pro w/SP3) for many years. If AVG is labeling the user32.dll as a trojan then that is caused from a too agressive anti virus program, because first of all it shouldn't be looking at any windows dll files in the first place, and yes, it should be further tested to make sure that the files being looked at or scaned aren't virus's or trojans and should scan from a known list of current virus's out there. I've run into quite a few of them on my PC's and laptop. Linux isn't pragmatic to this because it uses bunary code instead of the typical code used by Windows, which by the way is easier for hackers to crack or get into. Have a great day everyone.
by michealbird November 11, 2008 4:30 PM PST
my personal preference is OpenBSD with WinXP running under wine. this way i get the security of BSD and the functionality and programs of Windows
Reply to this comment
by solitare_pax November 11, 2008 5:09 PM PST
With all these viruses and anti-virus problems, I'm thinking about switching to the Amish OS.
Reply to this comment
by BtmnHatesRbn November 11, 2008 6:13 PM PST
I get daily viruses on my Windows XP machines, but none on my Windows ME machine.

But my main computers are all Mac. No viruses, no malware. None.

Also, adding all of the computers together that're still out there, 22% is the actual total of Macs, which was reported on this very website two years ago. Find it, I have a life and don't care to.
Reply to this comment
by Lerianis November 11, 2008 10:25 PM PST
I seriously doubt that you are getting viruses anywhere NEAR as often as you say you are, unless you are going to the 'bowels of the internet'. Heck, even if you are going there, you shouldn't be getting any viruses unless you are STUPID enough to still be running Windows XP, as you say you are.
Update to Vista: it closed a BOATLOAD of the holes with UAC that malware/spyware/viruses used to get into your system.
by nptausch November 12, 2008 8:12 AM PST
You should actually do research before you tell people lies. Apple just reached 21% market share in April of 2008...but that was US market share. Not world market share. They are currently somewhere around 2.9% for WORLD market share.

And the only way you can be getting viruses daily on your machine is if you are seriously doing things you shouldn't be doing in the first place. Upgrade to Vista which fixes almost all security holes in XP.

Oh and heres the link to Apple's market share info.

http://apple20.blogs.fortune.cnn.com/2008/04/01/analyst-apples-us-consumer-market-share-now-21-percent/
by ahmalik November 11, 2008 6:17 PM PST
AVG giving trouble to almost all SWs from NirSoft& a lot more SW.
Blocking every program.
It has lost my lot of downloads from reliable Sites
Reply to this comment
by Anthony koroma November 12, 2008 12:17 AM PST
Hellow.
your product is goood
but i want u to send me a software named live satelite tv on my pc
thanks in advance.
Reply to this comment
by johnericanderson November 12, 2008 5:33 AM PST
No Mac Viruses? Google "Macintosh Virus" Hmm...Only 466,000 pages of info.

And why do we need this?
Sophos Anti-Virus for Mac, version 4.9, released on 26 September 2007, fully supports the new version of OS X, version 10.5. Customers who update automatically from Sophos will already be running this version. Support for OS X 10.5 is also available in the current version of Sophos Update Manager.
Reply to this comment
by GhostMale66 November 12, 2008 5:58 AM PST
I used to use AVG, but when it updated to version 8, it didn't seem as good as it used to be. At that time, I started using AVAST and have been extremely happy with it!
Reply to this comment
by emperordarius November 12, 2008 8:31 AM PST
Ah, SFTU with those OS talking stuff. F... macs and linux, ok? That's not related to them so shut up-

About the issue, AVG already has a poor detection rate, if they continue continue delivering crappy software like this and ruining fantastic ones(AVG antispyware, for instance), they're going down.
Reply to this comment
by ScaryMonkey69 November 12, 2008 10:11 PM PST
LOL! Gotta love the Fanboi stuff! "My OS is better than yours!!". From what I've seen? Who Frickin' Cares!!! I still see NO proof that ANY OS is safe & totally 100% Bug Free.

I've run Linux, OSX, and Windows (but not Vista) and have yet to see any reason one is better than the other.
Reply to this comment
by cyclonica1980 November 12, 2008 11:42 PM PST
Hey if enough people started using macs GUESS WHAT there is going to be viruses on OSX too. No one makes viruses for mac because Mac still only controls 4% of the market. Why waste your time, AND if OSX is virus free than how come they make Norton Anti Virus for it???????? Answer that.
Reply to this comment
by night silence December 20, 2008 12:55 AM PST
Agreed, Linux and Mac are away from the trouble because no one bothers to write a virus for them!
by November 12, 2008 11:52 PM PST
Arosana: My operating system is much more stable than myself. In fact my PC has no known viruses, I on the other hand............
Reply to this comment
by maulfest November 13, 2008 7:50 PM PST
k.. Mac user here, and a tech for over 15 years.

All OS's are fine... i love my mac... but windows is never it's own problem.. the only problems with windows are A: defective/incompatible/poor hardware, and B: poorly written software. actually, windows does have one blunder i hate, and that's the registry.. other than that.. windoze is fine.
Reply to this comment
by thelemurking November 14, 2008 6:24 AM PST
Don't forget the USERS! The biggest security whole is always going to be the idiot using the computer... doesn't matter what the OS is!
by vcotty November 14, 2008 5:46 AM PST
All this for 1 mistake. 2 in all this years and complains from web pages cause they are being scanned. The truth is that I'm a certified IT Pro for a big company and in all my 8 years of experience AVG is the most secured AV software there is. They already have a fix, and this problem only was for some Non-English versions of the operating system. Some talk about Avast (and problem solved), yea, probably because Avast does not detect most of the threats out there (already happened to a colleague and I had to demonstrate the lack of effectiveness). This also happens with Norton, McAffe and a lot of other AV software out there. The only one good enough its Kaspersky but it has a big problem, machines must have high performance (good hardware) or they will become too slow to even work with them. I'm just being objective. My work requires for me to be updated in all security software and issues out there, my JOB depends on it, and till today, I haven't had any single reason to change to another AV software. (THIS ISSUE INCLUDED). And I'm still working for my company, and they are very happy with my job.
Reply to this comment
by The True Computer Genius December 12, 2008 6:10 AM PST
VCOTTY, maybe you should be fired then. AVG ***********. I've been a certified IT pro since July, 1998. That's over 10 years ago. I've worked for many "big companies," including the government, much longer than that - I've never cared much for certifications until I was forced to get them. Yes, Kaspersky is great, from what I've read. I have a system that is currently DOWN thanks to AVG's failures. Yes, I used it for things the normal user might not, but regardless, AVG IS HORRIBLE. SO take your "8 years of experience" and shut up. Thanks! :)
by night silence December 20, 2008 12:51 AM PST
Mr. certified IT Pro: sorry your evaluation of this situation is totally wrong! This is not a normal mistake we are talking about!!! It is a major windows file removal initiated by wrong decision of the type of software which we trust to protect our computers, not cause and create problems! Read the article again if don't understand how serious it is.
Showing 1 of 2 pages (53 Comments)
advertisement

A CNET Conversation with Eric Schmidt

CNET's Tom Krazit and Molly Wood sit down with Google CEO Eric Schmidt to discuss the future of Android, the Chrome OS, the problem of real-time search indexing, and more.

Verizon tests sending RIAA copyright notices

The No. 2 phone company, known for its reluctance to intervene in antipiracy cases, strikes an agreement to forward copyright notices on behalf of the music industry.

About Security

Online security is threatened by more than hacking and phishing attempts. Check here for the latest updates on software vulnerabilities, data leaks, and rapidly spreading viruses--and learn how to protect your systems.

Add this feed to your online news reader

Security topics

advertisement
advertisement

Inside CNET News

Scroll Left Scroll Right