Wednesday, November 12, 2008

XP não inicia após update do AVG - reboots sucessivos

An update of the popular anti-virus program AVG let a false positive slip through quality control which caused widespread panic on the Internet by desperate AVG users looking for help. The update detected a virus, more precisely Trojan Horse PSW.BANKER4.APSA, in the important system file user32.dll in Windows XP. User32.dll allows programs to implement a graphical user interface and is considered a core component of the Windows XP operating system.
Users who followed the advice of the AVG software program were greeted with a Blue Screen of Death as soon as they clicked on the Heal button to remove the virus. Any attempts to boot the system afterwards failed because of the missing file. AVG was quick to react and released another update that corrected the issue.
This does not help those users who already cleaned the file in Windows.
Here is the official information on how to fix the system for those users:

The system can be restored by following the steps in one of the comments on forum (using safe mode or recovery console and copying c:\windows\system32\dllcache\user32.dll into the right location)
If you need to restore deleted files from AVG Virus Vault you can do it this way:
- Open AVG user interface.- Choose “Virus Vault” option from the “History” menu.- Locate the file that was incorrectly removed and select it (one click).- Click on the “Restore” button.