Friendly Tech Ninja Linux how-to's for beginners

Howto: Fix AVG + iTunes Update = Small.BOG Trojan Horse

UPDATE: AVG has updated there virus database so you shouldn't have any problems with just, just make sure you've updated your AVG.

Don’t worry, Apple hasn’t really given you a Trojan Horse! Basically what’s happening is AVG is scanning the iTunes Installer, iTunes and iPod directories and thinking you’ve been infected with a “Small.BOG Trojan Horse”. This prevents you from downloading the installer, because AVG just deletes files inside it and even if you mange to download the installer without AVG deleting files from it, it will just delete files from the directories where iTunes is installed. Enough of that, here how to fix it...

This fix will work for both Windows XP and Vista (I’m assuming it’ll work on 64-bit version also).

Step 1
We first need to create expectations in AVG, this will stop it from scanning and deleting files from the /iTunes and /iPod directories in C:/Program Files.

Open up AVG and right and click on resident shield, select open and uncheck resident shield active.

Click “Manage Exceptions”, then “Add Path” and navigate to both (you’ll have to do this one at a time):

C:/Program Files/iTunes/
C:/Program Files/iPod/

Note: If you have uninstalled iTunes at this time you won’t see the iTunes or iPod directory. Simple navigate to where they should be (C:/Program Files/) and create a new folder and call them iTunes and iPod.

Click “Apply”, then “OK”, then “Save Changes”.

Step 2
Now we have to disable AVG from starting up (we will re-enable this once iTunes is installed), because if we don’t it will just delete files from the iTunes installer straight after we download it.

Right click on “My Computer” (either in the Start Menu or Desktop icon) and go to “Manage”. Double click “Services and Applications” and then double click on “Services”.

Look for “AVG Free8 WatchDog” and right click on it and go to “Properties”. Where is says “Startup Type” it should say “Automatic”, change this to “Disabled” via the dropdown menu. Click “Apply” and then “OK”.

Close all windows and restart your computer.

Note: don't worry about the security warnings you get when you boot back up, this is normal and we will amend them once we have fixed iTunes.

Step 3
If you tried to reinstall iTunes but it didn’t work, follow the instructions in Fix A. If you did not uninstall iTunes and just left it the way it was, follow the instructions in Fix B. If you don’t have the “Apple Software Update” program needed in A or just aren’t sure follow the instruction in Fix C (This one is pretty much bullet proof, if all fails try Fix C).

Fix A
If you uninstalled iTunes when you found it had stopped working and tried to reinstall it, but found that didn’t work either. Open the “Apple Software Update” program in your Start Menu (if you don’t have it follow the instructions in Fix C) and check the box for “iTunes + QuickTime” and click install. Follow the on screen prompts. It should download and install. Just quit out of the updater when it's all done, run iTunes to make sure it's working and move on to Step 4 if this didn’t work try Fix C.

Fix B
If you did not uninstall the program, run iTunes from the Start Menu (or icon), I found that in Vista (not sure about XP, but assuming) it knew there was a problem and fixed it. Again just follow any prompts and make sure when its finished iTunes is working. If this doesn’t work try Fix C.

Fix C
If you don't have “Apple Software Update” installed currently or have completely removed iTunes you can just go to http://www.apple.com/itunes/download/ and download iTunes. Make sure you've selected the right version for your system (32-bit or 64-bit) and download it. Once it has downloaded simply double click the setup installer and follow the on screen prompts, it should install fine. If no errors occur during the install just run iTunes and make sure it works.

Step 4
Return to the “Services” window (see above; right click on My Computer->Manage->Services and applications->Services) and find “AVG Free8 WatchDog” again. Right click on it and set the “Startup Type” back to “Automatic”.

Restart your computer and everything should be fine working fine. Open up AVG, and then open the “Resident Shield” and check the “Resident Shield Active” box. You're all done now. iTunes should not have any more problems with AVG.

I followed these methods on both a Windows XP and Vista machine (both 32-bit). I assume this will work with 64-bit versions as long as you follow my instructions.

This is just a work around to stop AVG from deleting iTunes. Lets hope AVG update there database soon. Once they do we can remove the Exception paths we add so that AVG can scan those directories for actual malicious files.

Please post in the comments if this helps you or if you have any problems.

Note: At the time of this post the conflicting software versions where; AVG version 8.5.392, Virus database version 270.13.28/2259 (Release Date 24 July 2009) conflicting with iTunes Version 8.2.1.6.