Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I just woke my computer (Windows Vista) from standby, plugged in my iPod Touch, and it complains that half of the iTunes DLLs are infected with the "Small.BOG" Trojan.

Anybody else seen similar? I believe I have the latest virus definitions.

share|improve this question
'cause it is :) – Isaac Waller Jul 24 '09 at 22:29
up vote 6 down vote accepted

It's just one of AVG many famous false positives, caused by its lastest definitions update.

Add exceptions to the resident shield if you want to use iTunes in the mean time until AVG fixes it.

Tools > Advanced settings... > Resident Shield > Exceptions

You probably want to add

C:\Program Files\iPod
C:\Program Files\iTunes

Obviously modify the path to where your program are actually installed.

share|improve this answer
That link was only 4 pages only 30 mins ago, now it's 6 (and increasing). lol – KTC Jul 24 '09 at 22:54
And my AVG post is growing. In fact an anti-AVG flame war has already started!… – ChristianLinnell Jul 24 '09 at 23:06
I switched to Avast. – Joe Philllips Aug 19 '09 at 16:57

Further, I have followed the instructions on "what to do if you suspect a false positive" and informed AVG of the problem.

share|improve this answer

Could be you do have a trojan. There is a listener, like Netcat, called Tini that is only 3KB. It is easy to wrap into other programs. Run a scan on the files before you add them to your exceptions list.

share|improve this answer

I recommend running full system scan using i.e. Malwarebytes´ Anti-Malware and/or Spybot Search & Destroy (remember to unplug your internet-connection and disable AVG). It could be just another false-positive but you never know. If it seems to be false-positive, add iTunes installation folder to AVG´s exception list.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .