AVG update cripples some Windows XP systems

[Fulmar]

http://tech.yahoo.com/news/cnet/20081111/tc_cnet/8301100931009387583

[CNET]

- On Tuesday an update for AVG 8 suggested that a Windows system file is a Trojan horse, and users who delete the file form the system could leave their Windows XP systems endlessly rebooting or unable to reboot at all. The problem only affects users of AVG 8 products running the Dutch, French, Italian, Portuguese, and Spanish language versions of Windows XP. AVG immediately sent out a corrected update to its customers, including those using the free editions of AVG.

A representative for AVG said, "AVG is actively working to remedy the problem some users are experiencing related to the most recent update to commercial and free versions of AVG 7.5 and AVG 8.0 in some languages. A number of users who installed the update mistakenly received a warning that the Windows system file user32.dll product version 5.1.2600.3099 was infected with a Trojan virus and were prompted to delete a file essential to the operation of Windows XP."

In response, the Czech antivirus company has posted details and a fix tool on its site.

For users unable to use their Windows XP machines, AVG says they "should contact their AVG reseller or ask a friend to download the information and fix tool for them."

AVG has suffered some embarrassing glitches of late. Last month, an AVG update declared some ZoneAlarm firewall files to be part of a Trojan horse. In July AVG had to reconfigure its Linkscanner tool after various Web sites complained about the increased traffic as a result of the tool's proactive scanning for malware.

[Ghosth]

AVG 8 had a similar problem with a false positive with Stalker, with a install that was at least 1.5 years old. Thankfully I managed to backup my saved game files. And eventually dumped AVG and reinstalled stalker.

The only thing I really miss about it is the email scanner.

Love threatfire though.

[Denholm]

*Nudge*

NOD32 has an email scanner.

[Banzzai]

I found out the hard way
with my ISP  playing up halfway through  the scenario
& AVG on mine & the wifes computer i've had a good few days of playing
WTF! NOW 

[Chalenge]

AVG has a problem with a number of installers. JustFlight's program installer for Cargo Pilot (for example) causes a false positive and a lot of people thought they had been infected, or would be infected if they installed it.

[llama]

Lemme let you in on a little secret:

AVG 8 cripples some Windows XP systems even when it isn't accidentally deleting critical system files.

-Llama

[Masherbrum]

I installed AVG on my old PC.   It didn't uninstall and remnants were still on it 2 years after the fact.   I'd come across them and removed them.  IMO, AVG itself is Malware.   

I use PCTools AV, Threatfire and their FW.   Coupled with CCleaner, my new computer is running better than before these were used. 

[Reschke]

I just spent 4 days working on a friends computer because someone at his wife's office told her to install 4 different anti-virus programs in addition to SpyBot S&D. One of which was AVG and it hosed the computer. 2 days of the time spent on that system was removing and repairing Windows XP installation. I have them running NOD32 now and the sucker runs great and works fine for them as a family now.

[Fulmar]

I just spent 4 days working on a friends computer because someone at his wife's office told her to install 4 different anti-virus programs in addition to SpyBot S&D. One of which was AVG and it hosed the computer. 2 days of the time spent on that system was removing and repairing Windows XP installation. I have them running NOD32 now and the sucker runs great and works fine for them as a family now.

Ah, the old "So and So told me to try that at work."  I believe this was also the source of the housing bubble bursting as well.

[Hungry]

I still have not installed AVG 8 on my machines, just dont like it from what Ive seen / heard.  I still use the last version of 7.5 that still updates.

 

[Max]

Lemme let you in on a little secret:

AVG 8 cripples some Windows XP systems even when it isn't accidentally deleting critical system files.

-Llama

So Llama, what are your recommendations for system security in terms of the average Joe Schmoe?

[MrRiplEy[H]]

Avira Antivir is free and beats AVG.

[llama]

So Llama, what are your recommendations for system security in terms of the average Joe Schmoe?

OK. Here we go.

If you insist on only using free av software, then Avira's AntiVirus (that's its name) is the best of the lot. The free version pops up a daily window advertising the paid-for version, and it would be wrong-wrong-wrong to use Google to see how to disable it.

If you have $40 a year to spend, then the best standalone AV product is Eset's NOD32, especially for a gaming system you're trying to keep lean and mean. It has virtually no system drag and among the best detection rates based on AVComparitive's testing.

Either way, I recommend a hardware firewall/router between you and your broadband modem, even if you're only using 1 computer. I think Window's own software firewall is just fine. I think outbound software firewalls only alert you when your system is already infected, which is of very limited use.

If you're looking to prevent new spyware outbreaks on a system you know to be clean, then the free ThreatFire is very good, and is friendly on system resources. If you need to clean an infested system, then Spyware Doctor ($40) from pctools.com is my current favorite and gets the best results (and I test these things for a magazine, and use them to clean clients' infested machines - these aren't idle recommendations).

If you feel you must use software from a brand you recognize, and you feel you want a two-way software firewall, then Norton Internet Security 2009 is quite good, and unlike versions even just two years old, isn't going to bog your system down. It costs $70 but that's good for 3 computers, which is a pretty good deal.

People who go on and on against Norton products just haven't worked with the latest versions, IMHO. Symantec burned a lot of us with the 2004, 2005, 2006, and 2007 product lines, so suspicion is warranted. But it's time to get over it and try out the latest versions on a test machine before branding it as junk.

Hope this helps,
Llama