Recent Changes - Search:

PmWiki

pmwiki.org

edit SideBar

DealWithAVG

Removing the Notification Bar

On November 11 a story hit Slashdot: "AVG Virus Scanner Removes Critical Windows File".

Re:I haven't been hit yet... (Score:5, Informative) by Animaether (411575) on Monday November 10, @08:10PM (#25714451) Journal

If you haven't been hit yet, then you probably won't be either; your AVG quite likely already has the fixed definitions file.

If you -are- hit... guess what? it pops up a warning that it believes it found some sort of trojan in user32.dll . Laymen might just tell it to remove the thing, but I do hope -you- would know better and tell it to stfu and ignore, then fetch the latest update (it will warn you a few more times if you've got the resident shield runnning, as user32.dll gets accessed a lot).

If you -are- hit and it has already removed it... quickly restore it, carry on.

If you are hit, it has removed it, and your machine has already crashed... reboot to a command prompt (safe mode MAY work, but it didn't when I fixed a machine on sunday), restore user32.dll from a cache / restore point. If you can't get it from a cache, get it from the installation CD (if you have one), but keep in mind that it will be missing updates and windows update might not realize that (as everything else on the system tells it hotfixes N-M have been installed - maybe MS will make the update check the MD5 or something of user32.dll, after this problem, just in case).

This was extremely stupid on the end of AVG, but then I'm still baffled why such files can be removed at all; same with ntldr. If you accidentally wipe your root dir, you're all kinds of f'ed.

Edit - History - Print - Recent Changes - Search
Page last modified on November 11, 2008, at 08:59 PM