AVG 8 update marks user32.dll as False Positive on XP SP2

PC crash after AVG update 9 Nov 2008

AVG has resolved the issue with another update. Quoted from here.

 

DO NOT REMOVE user32.dll,

Bit late now. !!!!

How do I get it back.?
I cannot open ANYTHING on my PC.

 

Do you have an XP operating system cd? If not, another computer that you can burn a cd on, and a blank cd? If so, I can give you instructions for replacing the file using the Recovery Console.

Out for a bit and will check in later.

 

Got 'jumped' by this false positive this morning. Reacted too fast, hit 'put it in the vault' and 'lost' the user32.dll and the use of the computer when AVG moved it! So I did like aghostofasmile suggested. It's a little bit more involved than it first appears:

1 Make a BartPE CD (First challenge: Requires you have access to a Windows installation CD or to a machine with the reinstallation files residing on the HD - fortunately I had a Dell laptop with the latter)(BartPE looks for these files when you run it, so if you're not sure let it look for you)

2 Your PC needs to be able to start up on a CD - there's a good chance yours is set up to go straight to the HD, and this will again (and again ...) block everything. So, you'll need to set the BIOS to look first for a CD-ROM to boot from. Start your 'dead' machine and boot it into the BIOS setup screen (hit delete button over and over again as the machine is booting up). You'll probably need to look for 'Advanced' options- there you will find the option to change the order of where your computer looks first to boot up - move CD-ROM to #1

3 Re-start with the BartPE CD-ROM in the DVD/CD drive. If you've done step 2 correctly it'll boot. It may take a while to boot up on the CD-ROM but it'll get there!

4 Use the 'Go' menu (replacement of the 'Start' menu) to find - under 'Programs' - the file manager A43 File Management Utility (equiv. of Explorer)

5 With the help of A43, on the 'dead' computer go to windows\system32\dllcache\and copy the file user32.dll

6 Go back up a level to windows\system32 and past the copy of user32.dll

7 Restart the 'dead' computer (via the 'Go' menu) and before it boots open the DVD/CD drive and remove the CD to prevent it from booting off the CD-ROM again.

8 The 'dead' comnputer should now be 'Alive' again!

Disclaimer: This worked for me so I hope it'll work for you. If it doesn't please don't blame me.

 

Thanks for posting that info thingumybob, and welcome to WindowsBBS. As you said, a bit involved. Was your machine able to boot into safe mode, as the AVG response indicates might be possible?

 

No, the 'normal' options (like 'Safe Mode') didn't work - it just kept cycling around, complaining it couldn't find what it needed and then trying again! That's when via Google and after some head-scratching I decided to go the BartPE route (I'd never used BartPE before). Took about 15 minutes. Worked perfectly first time, no problems.