AVG update removed critical Windows file

An update over the weekend for AVG Technologies virus scanner contained a flawed virus signature, which flagged ‘user32.dll’ as a Trojan Horse.

Choosing ‘heal’ or ‘quarantine’ caused systems to either stop booting or go into a continuous reboot cycle.

AMSTERDAM, Netherlands, Nov. 11 /PRNewswire/ — AVG is actively working to remedy the problem some users are experiencing related to the most recent update to commercial and free versions of AVG 7.5 and AVG 8.0 in some languages. A number of users who installed the update mistakenly
received a warning that the Windows system file user32.dll product version 5.1.2600.3099 was infected with a Trojan virus and were prompted to delete a file essential to the operation of Windows XP.

The problem only affects users of the Dutch, French, Italian, Portuguese, and Spanish language versions of Windows XP.

AVG is taking these steps to assist users in remedying the problem:
— Immediate release of a new update to correct the problem.
– Creation of a specific informational section on the AVG website that enables users to resolve the problem.

Affected users should follow the weblinks below for further information and to download the fix tool:

(1) http://www.avg.com/support/HotTopics1574 FalsePositiveuser32.dll
(2) http://www.avg.com/support/HotTopics1574 FalsePositiveuser32.dll – fix tool

Affected users unable to use their PCs should contact their AVG reseller or ask a friend to download the information and fix tool for them.
After running the fix tool, users should run the AVG update program to download and install the correct AVG update.

AVG sincerely regrets the inconvenience users have experienced. We are working to remedy the problem and ensure that any other potential vulnerabilities are identified and eliminated before they can impact users.

AVG Press Statement Regarding Problems from Product Update

Tagged as: Internet Security, Program