Updated! Those with AVG should read this.

**Whiskeyman** · 7th December 2006

From Bleeping Computer forums.

*Link to deleted thread removed*

If AVG alerts to this "trojan" do not allow the deletion of it.

**BillB** · 7th December 2006

Whiskeyman,

Not sure about anyone else, but I've been unable to get that forum thread to display. When I click on it, I get this error message;

Sorry, some required files are missing, if you intended to view a topic, it's possible that it's been moved or deleted. Please go back and try again.

I've also tried searching for it and found a related thread, but it also links to the one you posted and the same thing happened from there.

I would like to read it since I use AVG free. Any ideas?

Bill

**PeteC** · 7th December 2006

Bill

That's interesting - I was able to access the thread this afternoon, but now I get the same message as you. Maybe it was withdrawn?

**BillB** · 7th December 2006

Hi PeteC,

That's kind of what I was thinking too. Maybe they will post the information in another thread or something.

**Whiskeyman** · 7th December 2006

Either Grinler or another admin deleted it. TeMerc saw this posted elsewhere and may have more information.

AVG was falsely reporting a trojan (Flooder.Ake) then deleting a critical system file thereby causing your PC to keep rebooting. It was stated not to allow AVG to remove this "trojan". Some people had to do a repair install because of this. There were a couple of files to rename temporarily to stop AVG from detecting the "trojan" until a newer update for AVG straightened this out.

I just read in a HJT thread that TeMerc is investigating this.

TrojanHorseFlooder.AKE

-----------------------------------------------------------------------
Found it posted at Grisoft's AVG forum.

http://forum.grisoft.cz/freeforum/re...,backpage=,sv=

Quote:

flooder.AKE
Posted by: kid_canuk (IP Logged)
Date: December 7, 2006 08:08PM

Hi,
I was searching the forum to see if there was any news on this virus. It started Dec. 6th,2007. I know a person who got it and had to reinstall windows. If you want more info just google flooder.ake and you will find the info on it.

Re: flooder.AKE
Posted by: rdsok - Moderator (IP Logged)
Date: December 7, 2006 08:21PM

Please pay attention to where you are posting and make it fit the subject of the forum area you are in. Moved to the virus forum area.

Quoting Radek Janata - Grisoft Team

Unfortunately, this issue is caused by the false detection on particular version of "winlogon.exe" file. The false detection has been immediately fixed, however several users may have updated their AVG to this virus update containing this false definition. In order to solve this unpleasant issue, please proceed as follows:

1. Boot your computer to Safe mode. Power on (or restart) your computer, keep pressing F8 key until the Startup menu appears and choose "Windows in Safe Mode".

2. In the Windows Safe mode, navigate to following folder:

C:\WINDOWS\system32\drivers\

3. Rename rename the following files to avoid furhter deleting of "winlogon.exe".

AVGCLEAN.SYS -> AVGCLEAN.SY_
AVGRSXP.SYS -> AVGRSXP.SY_

4. Launch Registry Editor (regedit.exe) and remove the "__delete" value in the right pane from this key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AvgClean

5. Restart the computer back to Windows normal mode

6. Update your AVG program to latest virus base version. Launch AVG or open AVG Control Center and press F9 key to update your AVG.

7. Then rename the SYS files back to their original names

AVGCLEAN.SY_ -> AVGCLEAN.SYS
AVGRSXP.SY_ -> AVGRSXP.SYS

8. Restart your computer for to get AVG Resident shield loaded again

The problem should be solved now.

Please note that this issue may happen on a very old Windows XP systems without any Service Packs. This issue doesn't appear on Windows XP Service Pack 1 or Service Pack 2. Therefore we strongly recommend to update your Windows XP to Service Pack 2, not only to get your computer secure. Visit [www.windowsupdate.com] to get the latest critical security patches for your operating system.

Please accept our apologies for this inconvenience.

**TeMerc** · 7th December 2006

I've PMed one of the mods at Bleeping, awaiting reply.

MinnesotaMike · 8th December 2006

I have two systems with XP SP2 and one with Win98. From what I see, my XP systems are okay. What about the 98 system?

Mike

drba1000 · 8th December 2006

I looked for a file named AVGCLEAN.SYS but can't find it.

**Whiskeyman** · 8th December 2006

Quote:

Originally Posted by drba1000

I looked for a file named AVGCLEAN.SYS but can't find it.

They may be hidden files.

Open Windows Explorer and click on Tools > Folder Options > View tab. Under Hidden folders and files check Show hidden files and folders and uncheck Hide extensions for known file types. Click Apply > OK and exit out of Folder Options and Explorer.