Canadian Wellsite

Oiltalk

Oiltalk > General Information > Tech Support > Trojan Horse Flooder.AKE Infecting AVG Users (Released Dec 6th 2006)

Forum Quick Jump

[ Next Thread >> | Show Newest Post First ]

Tech Support
Registered Member

Date Joined Jul 2006
Total Posts : 9

Posted 12/7/2006 3:47 PM (GMT -6)

Flooder.Ake is a brand new threat that began to appear on people's computers on December 6th, 2006.

The symptoms of infection are an alert window which pops up reading "threat found, trojan horse, heal now". Clicking this popup quarantines a system file, which then restarts the computer and pops up the alert again. The computer is then stuck in an infinite loop. Here are two solutions which have been reported to work (see below).

This problem only seems to be impacting users of the antivirus program, AVG. Initial indications are that this is not a true virus, but rather a bug in AVG that results in damage to system critical files.

Solution #1:

1. Boot your computer to Safe mode. Power on (or restart) your computer, keep pressing F8 key until the Startup menu appears and choose "Windows in Safe Mode".

2. Uninstall AVG through the control panel "Add or Remove Programs" applet.

3. Reboot.

Reinstall AVG and Update.

Solution #2:

1. Boot your computer to Safe mode. Power on (or restart) your computer, keep pressing F8 key until the Startup menu appears and choose "Windows in Safe Mode".

2. In the Windows Safe mode, navigate to following folder:

C:\WINDOWS\system32\drivers\

3. Rename rename the following files to avoid furhter deleting of "winlogon.exe".

AVGCLEAN.SYS -> AVGCLEAN.SY_
AVGRSXP.SYS -> AVGRSXP.SY_

4. Launch Registry Editor (regedit.exe) and remove the "__delete" value in the right pane from this key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AvgClean

5. Restart the computer back to Windows normal mode

6. Update your AVG program to latest virus base version. Launch AVG or open AVG Control Center and press F9 key to update your AVG.

7. Then rename the SYS files back to their original names

AVGCLEAN.SY_ -> AVGCLEAN.SYS
AVGRSXP.SY_ -> AVGRSXP.SYS

8. Restart your computer for to get AVG Resident shield loaded again

Post Edited (Tech Support) : 12/7/2006 11:15:24 PM GMT

Forum Information

Currently it is Tuesday, June 18, 2013 5:03 PM (GMT -6)
There are a total of 3,599 posts in 504 threads.
In the last 3 days there were 0 new threads and 0 reply posts. View Active Threads