<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>gHacks technology news &#187; avg false positives</title>
	<atom:link href="http://www.ghacks.net/tag/avg-false-positives/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.ghacks.net</link>
	<description>A technology blog covering software, mobile phones, gadgets, security, the Internet and other relevant areas.</description>
	<lastBuildDate>Tue, 24 Nov 2009 03:24:03 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.6</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>AVG 8 Update Marked User32.dll As Virus Infected</title>
		<link>http://www.ghacks.net/2008/11/10/avg-8-update-marked-user32dll-as-virus-infected/</link>
		<comments>http://www.ghacks.net/2008/11/10/avg-8-update-marked-user32dll-as-virus-infected/#comments</comments>
		<pubDate>Mon, 10 Nov 2008 14:06:20 +0000</pubDate>
		<dc:creator>Martin</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[anti virus]]></category>
		<category><![CDATA[avg]]></category>
		<category><![CDATA[avg anti-virus]]></category>
		<category><![CDATA[avg false positives]]></category>
		<category><![CDATA[avg restore]]></category>
		<category><![CDATA[avg user32.dll]]></category>
		<category><![CDATA[trojan]]></category>
		<category><![CDATA[virus]]></category>
		<category><![CDATA[virusscanner]]></category>

		<guid isPermaLink="false">http://www.ghacks.net/?p=8190</guid>
		<description><![CDATA[An update of the popular anti-virus software program AVG let a false positive slip through quality control which caused widespread panic on the Internet by desperate AVG users looking for help. The update detected a virus, more precisely Trojan Horse PSW.BANKER4.APSA, in the important system file user32.dll in Windows XP. User32.dll allows programs to implement [...]]]></description>
			<content:encoded><![CDATA[<p>An update of the popular anti-virus software program AVG let a false positive slip through quality control which caused widespread panic on the Internet by desperate AVG users looking for help. The update detected a virus, more precisely Trojan Horse PSW.BANKER4.APSA, in the important system file user32.dll in Windows XP. User32.dll allows programs to implement a graphical user interface and is considered a core component of the Windows XP operating system.</p>
<p>Users who followed the advice of the AVG software program were greeted with a Blue Screen of Death as soon as they clicked on the Heal button to remove the virus. Any attempts to boot the system afterwards failed because of the missing file. AVG was quick to react and released another update that corrected the issue.</p>
<p>This does not help those users who already cleaned the file in Windows. Here is the official information on how to fix the system for those users:</p>
<p><span id="more-8190"></span><br />
<blockquote>The system can be restored by following the steps in one of the comments on forum (using safe mode or recovery console and copying c:\windows\system32\dllcache\user32.dll into the right location)</p>
<p>If you need to restore deleted files from AVG Virus Vault you can do it this way:</p>
<p>- Open AVG user interface.<br />
- Choose &#8220;Virus Vault&#8221; option from the &#8220;History&#8221; menu.<br />
- Locate the file that was incorrectly removed and select it (one click).<br />
- Click on the &#8220;Restore&#8221; button. </p></blockquote>
<p>A possibility would have been to cross-check the detected virus with another anti-virus software or an online virus scanner to be sure that it is indeed infected before deleting the file.</p>

	Tags: <a href="http://www.ghacks.net/tag/anti-virus/" title="anti virus" rel="tag">anti virus</a>, <a href="http://www.ghacks.net/tag/avg/" title="avg" rel="tag">avg</a>, <a href="http://www.ghacks.net/tag/avg-anti-virus/" title="avg anti-virus" rel="tag">avg anti-virus</a>, <a href="http://www.ghacks.net/tag/avg-false-positives/" title="avg false positives" rel="tag">avg false positives</a>, <a href="http://www.ghacks.net/tag/avg-restore/" title="avg restore" rel="tag">avg restore</a>, <a href="http://www.ghacks.net/tag/avg-user32dll/" title="avg user32.dll" rel="tag">avg user32.dll</a>, <a href="http://www.ghacks.net/tag/trojan/" title="trojan" rel="tag">trojan</a>, <a href="http://www.ghacks.net/tag/virus/" title="virus" rel="tag">virus</a>, <a href="http://www.ghacks.net/tag/virusscanner/" title="virusscanner" rel="tag">virusscanner</a><br />

	<h4>Related posts</h4>
	<ul class="st-related-posts">
	<li><a href="http://www.ghacks.net/2005/12/02/clam-win-antivirus/" title="Clam Win Antivirus (December 2, 2005)">Clam Win Antivirus</a> (3)</li>
	<li><a href="http://www.ghacks.net/2006/12/18/avg-antivirus-will-continue-to-be-free/" title="AVG-Antivirus will continue to be free (December 18, 2006)">AVG-Antivirus will continue to be free</a> (2)</li>
	<li><a href="http://www.ghacks.net/2006/01/06/antivirus-test/" title="Antivirus Test (January 6, 2006)">Antivirus Test</a> (5)</li>
	<li><a href="http://www.ghacks.net/2009/05/20/what-you-should-do-after-buying-a-new-computer-system/" title="What You Should Do After Buying A New Computer System (May 20, 2009)">What You Should Do After Buying A New Computer System</a> (18)</li>
	<li><a href="http://www.ghacks.net/2007/01/01/test-your-anti-virus-program/" title="Test your Anti-virus program (January 1, 2007)">Test your Anti-virus program</a> (10)</li>
</ul>

]]></content:encoded>
			<wfw:commentRss>http://www.ghacks.net/2008/11/10/avg-8-update-marked-user32dll-as-virus-infected/feed/</wfw:commentRss>
		<slash:comments>25</slash:comments>
		</item>
	</channel>
</rss>
