apple
Report a problem

AVG update breaks iTunes

Owen Williams   on 26 July 2009 - 10:41 · 58 comments & 9045 views

Advertisement (Why?)
A recent AVG signature file update is incorrectly identifying iTunes/iPod files as viruses, as reported by forum users on the Apple website.

The AVG Virus scanner identifies all iTunes/iPod related files as the 'Small.BOG' trojan - a trojan which does not seem to exist, as revealed by a quick Google search. The update, which is unidentified, but confirmed to be a false positive, is removing all files, and deleting them. Once these files have been "cleaned", iTunes will not run, and is not fixable by a reinstall.

A fix has been pushed by AVG in the latest signature update - but users may need to reinstall iTunes. A fix can be found here on the Apple Forums.

AVG is a free/paid antivirus solution offered by AVG Technologies, and is renowned for its' high virus detection rate, and is currently rated 4th in Neowin's "Definitive Best Antivirus 2009" poll on our forums.

iTunes has also been in the news lately due to Apple deciding to remove the Palm Pre's ability to sync like an iPod, by pushing an update which prevented iTunes from synchronizing with devices that falsely identify themselves as an iPod. Palm has updated WebOS to utilize a new way of spoofing the Pre's identity.

Post a comment · Send to friend Comments · There are 58 additional comments
#1 +Vice on 26 Jul 2009 - 10:49
Pretty funny.
(11 replies) #2 Beaux on 26 Jul 2009 - 11:09
AVG was right. iTunes is a virus.
#2.1 Owenw on 26 Jul 2009 - 11:10
Lol, well there is always songbird..
#2.2 brent3000 on 26 Jul 2009 - 12:23
+1

#2.3 dr spock on 26 Jul 2009 - 13:36
+1
#2.4 neo158 on 26 Jul 2009 - 16:07
+9000
#2.5 Deihmos on 26 Jul 2009 - 17:24
Songbird is as lacking as itunes. Can't read embedded album art, convert tracks or sync videos.
#2.6 Owenw on 26 Jul 2009 - 21:51
Deihmos said,
Songbird is as lacking as itunes. Can't read embedded album art, convert tracks or sync videos.

But it *can* do everything else (And Video is coming)
#2.7 ataris_kid on 26 Jul 2009 - 22:26
Beaux said,
AVG was right. iTunes is a virus.

This.
#2.8 roadwarrior on 26 Jul 2009 - 22:52
Deihmos said,
Songbird is as lacking as itunes. Can't read embedded album art, convert tracks or sync videos.


Yet iTunes can do all three of the things you mentioned, so how is it lacking those things?
#2.9 jme621 on 27 Jul 2009 - 02:09
Beaux said,
AVG was right. iTunes is a virus.

this is correct. end of thread. goodbye.
#2.10 RAID 0 on 27 Jul 2009 - 03:02
Beaux said,
AVG was right. iTunes is a virus.

lol
+1
#2.11 +dead.cell on 28 Jul 2009 - 13:18
+1
(3 replies) #3 thealexweb on 26 Jul 2009 - 11:09
When Intel bought a stake in Grisoft it was renamed AVG Technologies.
#3.1 Owenw on 26 Jul 2009 - 11:11
thealexweb said,
When Intel bought a stake in Grisoft it was renamed AVG Technologies.

Thanks - fixed
#3.2 thealexweb on 26 Jul 2009 - 11:54
Owenw said,
Thanks - fixed


Your welcome
#3.3 rm20010 on 26 Jul 2009 - 18:21
Was wondering why they suddenly changed their company name. Good to know.
#4 lflashl on 26 Jul 2009 - 11:11
DAm AND TOO think i spent hours trying to work out where i got that virus from! all along it was fake!
#5 PaulDr on 26 Jul 2009 - 11:13
Ooo interesting I had just got a text from a friend today that I needed to come fix her computer because she opened Itunes and it said she had a whole bunch of trojans.. Guess this is just the case and here I was looking forward to some fun owell.
#6 Premgenius on 26 Jul 2009 - 11:15
Stopped using AVG not the first time an update has broken another app.
(1 reply) #7 Juski814 on 26 Jul 2009 - 11:17
iTunes has also been in the news lately due to Apple deciding to remove the Palm Pre's ability to sync like an iPod, by pushing an update which prevented iTunes from synchronizing with devices that falsely identify themselves as an iPod. Palm has updated WebOS to utilize a new way of spoofing the Pre's identity.


itunes also cures cancer, and in some instances WebOS has been known to offer information similar but not substantial to the original topic.

because the article was completely about how itunes was a virus and how palm pre circumvented a plug in a non-virus update. thanks, very useful commentary.
#7.1 MioTheGreat on 26 Jul 2009 - 15:28
Juski814 said,
itunes also cures cancer



Little known fact: It's actually the uninstaller that can cure cancer.
(5 replies) #8 franzon on 26 Jul 2009 - 11:26
yet another evidence that an antivirus is often useless and more dangerous than a virus
#8.1 FoxieFoxie on 26 Jul 2009 - 11:37
franzon said,
yet another evidence that an antivirus is often useless and more dangerous than a virus


you have a proof that apple has not added some nasty code there?
#8.2 Atlonite on 26 Jul 2009 - 11:58
and talk like that is why theres a million pc botnet floatin round spammin and DOSing the hell out of servers world wide
#8.3 Silverskull on 26 Jul 2009 - 13:11
FoxieFoxie said,
you have a proof that apple has not added some nasty code there?

"but confirmed to be a false positive"

Read the article.
#8.4 Azyr on 26 Jul 2009 - 14:56
Atlonite said,
and talk like that is why theres a million pc botnet floatin round spammin and DOSing the hell out of servers world wide


and your positive that antivirus solutions would have prevented that somehow?

AV solutions generally push people to being more relax about security and thus actually increasing infections a lot. There is no definite solution to all this, you just have to educate people and hope theyre more sensible.

But as in the real world scenario, you will never get a %100 ratio, so we'll all be stuck with this.
#8.5 bob_c_b on 26 Jul 2009 - 18:56
FoxieFoxie said,
you have a proof that apple has not added some nasty code there?


I have proof this is the dumbest post I've read all day.
#9 Atlonite on 26 Jul 2009 - 11:56
HAHA i was wondering how they stopped the pre from syncing well now we know iTunes infects it with a virus well done (Cr)apple
(7 replies) #10 n_K on 26 Jul 2009 - 12:06
WHEN will people learn that AVG IS A HEAP OF CRAP!?
The number of false positives over the years it has had, and not only just once, after updates; THEY KEPT COMING BACK!
Anything made by multimedia fusion 1.5 and 2.0, install creator, patch maker, loads of general purpose things too.

URGH I HATE ANYONE THAT EVER USES AVG, THEY SHOULD NOT EVEN HAVE A COMPUTER! GET CLAM-AV!
#10.1 thealexweb on 26 Jul 2009 - 12:39
n_K said,
WHEN will people learn that AVG IS A HEAP OF CRAP!?
The number of false positives over the years it has had, and not only just once, after updates; THEY KEPT COMING BACK!
Anything made by multimedia fusion 1.5 and 2.0, install creator, patch maker, loads of general purpose things too.

URGH I HATE ANYONE THAT EVER USES AVG, THEY SHOULD NOT EVEN HAVE A COMPUTER! GET CLAM-AV!


Clam AV has very poor definitions, it's not real time and it's just pretty crap generally. AVG may not be as good as it used to be but it will always be better than ClamWin
#10.2 +warwagon on 26 Jul 2009 - 16:41
n_K said,
WHEN will people learn that AVG IS A HEAP OF CRAP!?
The number of false positives over the years it has had, and not only just once, after updates; THEY KEPT COMING BACK!
Anything made by multimedia fusion 1.5 and 2.0, install creator, patch maker, loads of general purpose things too.

URGH I HATE ANYONE THAT EVER USES AVG, THEY SHOULD NOT EVEN HAVE A COMPUTER! GET CLAM-AV!


I tend to agree. AVG has the worst luck with false positives.
#10.3 rm20010 on 26 Jul 2009 - 18:23
The whole point of me getting an antivirus is to stop any questionable script or file sent over Messenger from being saved on my hard drive, not forcing me to scan my entire hard drive just to pick out a handful of "infections."

Also, I used to use AVG a few years ago, with Clickteam's products as you listed up there. Didn't run into any false positives. Actually it was and still is Avira who incorrectly flagged a few Install Maker executables.
#10.4 Owenw on 26 Jul 2009 - 21:52
rm20010 said,
The whole point of me getting an antivirus is to stop any questionable script or file sent over Messenger from being saved on my hard drive, not forcing me to scan my entire hard drive just to pick out a handful of "infections."

Also, I used to use AVG a few years ago, with Clickteam's products as you listed up there. Didn't run into any false positives. Actually it was and still is Avira who incorrectly flagged a few Install Maker executables.

I used to use AVG personally, but when version 8 landed, I jumped off the band-wagon. It was crap. I switched to NOD32 for a year (after winning it), and it is by far the best. After my sub ran out, I started using Microsoft Security Essentials, which is up there with NOD32
#10.5 aatnet on 27 Jul 2009 - 13:18
personally i don't understand at all why AVG has great ranking on popular software sites. It is crapware. I had to reinstall windows because AVG's false positives made my system un-bootable. Be warned, be very warned
#10.6 +warwagon on 27 Jul 2009 - 15:58
aatnet said,
personally i don't understand at all why AVG has great ranking on popular software sites. It is crapware. I had to reinstall windows because AVG's false positives made my system un-bootable. Be warned, be very warned


Yep for a while after 8.0 came out I was impressed with the performance and the UI of version 8. So was installing it instead of avast. Then AVG had that false positives were it would delete windows system files and make the system no longer boot. I'm lucky I didn't get any calls about that. But I could have potentially got'n 40+ broken computer. I went back to avast and will never use AVG again.
#10.7 rm20010 on 28 Jul 2009 - 04:53
Owenw said,
I used to use AVG personally, but when version 8 landed, I jumped off the band-wagon. It was crap. I switched to NOD32 for a year (after winning it), and it is by far the best. After my sub ran out, I started using Microsoft Security Essentials, which is up there with NOD32


Version 7 was nice and light, I found. Unfortunately, the initial release of version 8 forced the installation of the web filter, which if I recall correctly caused a few problems.

For the time being, I find the most recent build of the free version of avast! to be the lightest on system resources.
(2 replies) #11 Raa on 26 Jul 2009 - 13:01
Well you get what you pay for hey?
Glad i'm using NOD32. Never had a false positive. *touches wood* hehe
#11.1 Premgenius on 26 Jul 2009 - 13:03
Second that been with them since 2005 and the reason was AVG.
#11.2 Jeffrey89 on 27 Jul 2009 - 12:17
Raa said,
Well you get what you pay for hey?
Glad i'm using NOD32. Never had a false positive. *touches wood* hehe



For me, it's NOT32. I dumped it since I had a false positive for an application which contained some common Visual Basic code to check for updates.
(3 replies) #12 m-p{3} on 26 Jul 2009 - 14:09
Nice job AVG, on top of sending nag screens recently.
I guess there are better alternatives, like Avira or Avast.
#12.1 FuhrerDarqueSyde on 26 Jul 2009 - 17:49
Yeah I use Avira and its always worked pretty well for me.
#12.2 Slugbait on 26 Jul 2009 - 20:03
I recently switched to Avira, and it found four trojans on Day 1, none of which exist in real life. And these were pretty old files...one was the TCP/IP patcher from lvllord, and Avira isn't the only anti-virus program to try and quarantine it: http://www.virustotal.com/analisis/9130062...e6f8cff6472ed9a. Avira defends their position on flagging files like this, and won't stop. eTrust, as well as SuperAntiSpyware and Spybot all correctly indicate that the files are perfectly fine.

But I digress...what happened with AVG's false positive is nothing compared to what happened two weeks ago with eTrust antivirus: http://news.cnet.com/8301-1009_3-10283199-83.html

In other words, I'm pretty certain every antivirus program has generated false positives.
#12.3 Magallanes on 27 Jul 2009 - 13:00
Slugbait said,
I recently switched to Avira, and it found four trojans on Day 1, none of which exist in real life. And these were pretty old files...one was the TCP/IP patcher from lvllord,


How weird, i scanned the latest lvlord patch with the latest version of Avira and it wasn't detected as a trojan. Did you changed the heuristic level?


#13 nifke on 26 Jul 2009 - 16:42
Great AVG, iTunes is just crap!
#14 venejo on 26 Jul 2009 - 16:53
This has happened a couple of times with AVG's updates. One i remember completely crippled XP and failed to boot and load the desktop.
#15 omnicoder on 26 Jul 2009 - 18:45
Good job AVG! (not sarcasm)
#16 soldier1st on 26 Jul 2009 - 20:49
good job crap avg for flagging itunes garbage as a virus as it is a virus in itself and should be demolished and buried so deep you cant get it to do anything at all.
#17 Jaxkesa on 26 Jul 2009 - 22:53
Oh great....I just installed AVG for the first time a few days ago. After using NOD32 for a couple of years, I fancied a change. I'm not too impressed with AVG anyway, and this doesn't help
#18 WhoTheF on 26 Jul 2009 - 23:00
Yeah, this happened to me, it had ruined my day without music. I closed AVG and reinstalled but it still wouldn't work. I'm glad it's working now.

I thought AVG was supposed to be good - so I read on the forums here.
#19 jpcahn on 26 Jul 2009 - 23:26
Nod32 is aewsome and Symantec has done a complete turnaround with Norton Antivirus. It is very light on resources and inexpensive if you get it from Amazon or Buy.com.
#20 Julius Caro on 26 Jul 2009 - 23:29
I dont use AVG. But i would be more annoyed by how hard it is to get the thing resintalled. Where does one put the blame? The itunes installer or the windows registry or what?
#21 carmatic on 26 Jul 2009 - 23:44
iTunes = Small.BOG
#22 Skullpture on 27 Jul 2009 - 00:09
LOL. Shows how great AVG is...
#23 mocax on 27 Jul 2009 - 01:43
bought AVG8 a couple of months back, and always had this problem of failing to connect to websites. The network connection just hangs. It seemed to hijack network packets and refuse to give them up.

currently trying out morro beta...
#24 leo_the_lion on 27 Jul 2009 - 02:10
There was an incredible deal a couple of days ago on Newegg - ESET AV for $20
#25 Lloyd Borrett on 27 Jul 2009 - 06:44
Unfortunately, a recent virus database update resulted in iTunes being detected as a Trojan by AVG security products. We can confirm that it was a false alarm. AVG immediately released a new virus database update (definition file 270.13.29/2260) that corrected this issue.

For details of how to fix the problem, please see http://www.avg.com.au/index.cfm?section=su...amp;feature=179
#26 lordcanti86 on 28 Jul 2009 - 03:33
Another good reason to avoid iTunes on Windows at all costs.

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)