Sheur2.QLA Virus Found in Pirates Online (Merged)
 

Ok, so I tried to launch POTCO just now, I have been playing the game for over a year, no issues with my AVG finding any thing it thought was harmful in it.... I launch, and AVG tells me it has found a threat called "Sheur2.QLA" while attempting to launch the game from the start menu.... I attempted to ignore the threat, because I felt it was a false positive... After that the game refused to load, well then I moved the file to the vault, but the Launcher.exe was never found, so then no load again.... I restored the file from the vault, then AVG freaked out the same as before..... Have any of you experienced this? My game refuses to load now even if I ignore the threat, so I uninstalled POTCO, but there is a small thought in the back of my mind that I might have gotten some sort of bizzare virus that has infected POTCO possibly to gain my access information some how. I may try reloading the game again this week, or just reformatting for the heck of it just to be safe. I never have heard of this before. Thanks for any info any one might have.

Larence Tuppington

FIX:

Yeah this happened to me before, and a couple of friends, Try using spybot-search and destroy if you have it, Scan it then delete it. If it doesnt work tell me.

I got the same thing an hour ago when I tried to install the test server download.
exactly the same AVG told me it was a Trojan Horse Sheur2.qla

I SINCERELY doubt that the sheur2.QLA Trojan Threat error mysteriously appeared on your screen "before, and a couple of friends." See there is no such thing as a Trojan signature named "sheur2.QLA". That warning is a generic message caused by the bloodhound heuristics of AVG interpreting a file it sees as potentially dangerous. Did you have AVG installed and running when you saw the messages? Did your couple of other friends also just happen to have AVG running on their systems?? Because those conditions would need to be met for what you just said to be true.

I think what you're referring to is actually a problem that happened LAST YEAR where AVG was detecting Toontown's Launcher1 as a problem but AVG updated their virus definitions and that problem was resolved. This sheur2.QLA thing is brand new and outside of this single forum entry, Google can't find a single other instance of it on the net. In fact, when I went to AVG's own site and searched for the error THERE, a search of their own virus definitions came up with nothing. So I think something between Disney's launcher program and AVG has gone awry again and technical support needs to be notified NOW!

Why are you telling people to load up Spybot Search and Destroy? What exactly are they supposed to be scanning? Can you specifiy a file or directory? If something is found, what are you instructing them to delete? "IT"??? Delete WHAT!?

I'm opening a trouble ticket with Disney's technical support right now to find out what's REALLY going on and I'm pretty sure we'll see yet another updated definitions file come out of AVG this week so the problem can be fixed again.

In the meantime...you're welcome to Search and Destroy all you like...but without more specific information from Mr. Swashbuckler there, I think you'll likely be chasing phantoms and ghosts and just make your life unnecessarily miserable since you have no idea WHAT to scan or delete. Please do me a favor and open a trouble ticket as well so they see it's affecting multiple users and not just one. The URL to open a ticket with them is here: BugSubmitReport

It happened to me this morning. Try using that "Spybot-Search and Destroy" Program. But also, run a scan where your downloads are held, AVG should be able to find a Trojan Horse. I found like 6 and 2 virus's this morning.

Same exact thing happened to me, for both live an test. Unistalled reinstalled no luck!

Me too. It happened to me.

Right now I am using Vundo Fix to see if it fixes the problem.

I also e-mailed the pirates online team. Maybe try to call them or talk to them in live chat.

Well Vundo Fix didn't find anything and I went to AVG.com and found this http://www.avg.com/download-update
Look and the bottom and it says; Added detection of new variant of Worm/Autoit.RQN, new variants of trojans PSW.Generic6.BDIY, SHeur2.QNR, Generic12.BPHA, PSW.Ldpinch.XAQ, PSW.OnlineGames.BPTA.

Maybe they think that Sheur2.QLA is Sheur2.QNR. Darn AVG.

Is there anyway to get AVG to let Pirates Bypass?

I don't know, well I know this I will keep updating AVG until it is fixed. And maybe I need to wait a day for my sent e-mail to pirates online replies back.

I've updated my AVG 3-4 times today. It says it has the latest database. Oh, and they won't respond to emails for a few hours. They haven't "Opened" yet. I'll be on with Live Support as soon as they open to.

Seems to be a running problem with AVG...here's a pretty old thread from one of the last times this happened:

http://www.piratesonlineforums.com/f...ead.php?t=4639

I'm going to have to play around with mine and see if I'm getting the same thing.

Let us know what live support says Ethan!

What really irks me is that AVG goes ahead and deletes the file even when you tell it to ignore it. That's the kind of babysitting I don't need.

I am gonna call them see what they can do. Live Chat is closed.

Well I need to wait at Noon EST time until the phone support can answer. And it closes at 4 PM EST.

In that thread you gave me, it said that using Avast Anti-virus would fix the problem. I was just wondering if Avast is as good as AVG?

I hope they fix it. :(

The Live Support guy told me that he logged the Problem for the Engineers to take a look at. But he has no answer. So I'm going to go talk to the AVG guys next.

Hmmmm......well, did a full scan with McAfee.....no issues found. Both Open and Test run fine. When you do a Google search for SHeur2.QNR it only appears to pull references to AVG sites. Sounds like a case of mistaken identity on AVG falsely identifying a file....unless we truly have some users with a trojan.


http://www.avg.com/

Update AVG - AVI 270.10.23/ 1953

Added detection of new variant of Worm/Autoit.RQN, new variants of trojans PSW.Generic6.BDIY, SHeur2.QNR, Generic12.BPHA, PSW.Ldpinch.XAQ, PSW.OnlineGames.BPTA.

February 14, 2009

Oh yea baby! I got the fix for AVG! I'll list the Steps you need to take to let it run Pirates.

Starting Out:

1. Open AVG to the System Overview.
2. Go to "Tools > Advanced Settings".
3. Look for "PUP Exceptions" and Open It.
4. Click "Add Exception". When it brings up the little box asking for the file path, enter "C:\Program Files\Disney\Disney Online\PiratesOnline\Launcher1.exe".
5. Let it register where the file is located, then click ok and apply.
6. Now stay in the Advanced settings menu and go to "Resident Shield > Exceptions"
7. Click "Add Path" and navigate it to "C:\Program Files\Disney\Disney Online\PiratesOnline\"
8. Click apply, and attempt to open Pirates Online! It should open up from your Desktop. If the desktop button does not work, go to, Start > All Programs > Disney Pirates Of The Caribbean > Pirates Of The Caribbean Online.

So there you have it. That's how you Configure AVG to Work with Pirates Online.

Sorry it took so long, but those Disney Live Support People are bad...

Indeed. Sometimes the virus/malware scanner companies send out an update and it mistakenly tags a legit file as "harmful." I would not recommend running any additional anti-malware utilities for an issue like this since there wouldn't be any real results. You will either need to wait for AVG to fix it by sending out another update, configure AVG for an exception, or switch your anti-virus product.

edit: Well, there you go. Glad AVG was able to give you a solution (configure exceptions).

Well this bit me first thing this morning as well. Started using AVG when my nortons subscription expired. Thanks Ethan for doing the ground work here, was a life saver.

FYI If your on test, you'll probably want to add the TEST exe and Folder in the same fashion.

No i can't get this to work still. Wont let me do this part

Click "Add Exception". When it brings up the little box asking for the file path, enter "C:\Program Files\Disney\Disney Online\PiratesOnline\Launcher1.exe".

If you are trying to type that in by hand that is likely the issue.
You should be searching for the exe itself with browse/search button (square with ... on it).
If the Launcher1.exe is not there, then its possible this has happened to you....
This did not happen to me, I think AVG makes this decision based on the users level of access on the PC.
(Flat out said I was a power administrator on the screen that prompted me)

You may have to proceed to the AVG virus vault and see about recovering the Launcher1.exe file from it first.

I added the whole of the disneyonline folder to the AVG exceptions so I don't get a problem with the Test server launcher, which has also been flagged as sheur2 infected. I ran a full scan on my machine, and only launcher1.exe was found to be infected.

I think this is a repeat of last years problem. None of my spyware programs have found any other issues on my machine

AVG updated their definitions yesterday, Feb 14th, and the old problem with the launcher.exe being a trojan horse is back. Same as what happened last year. There is no trojan horse, and no threat. It's just the same old AVP problem. I'm thinking of uninstalling AVP and finding another anti virus program if anyone has any suggestions, LMK. I agree with the PP who said that he wanted more control to decide weather to delete or ignore th problem, instead of AVP deciding for you.
Thanks!:vhuh:

I got the same thing, here is a mini-screenshot of it:
http://i596.photobucket.com/albums/t...virusPOTCO.png

All I can say for this is: If you're so sure its not really a virus, send it to Analaysis
Open AVG->History->Virus Vault
Click on the virus, and send it to analaysis, they can see if its really a virus or not.

EDIT:
I just tried to send it to analysis, 3 times, and it kept saying sending failed. Heres the screenshot:
http://i596.photobucket.com/albums/t...dingfailed.png (why is nothing showing, I really dont know)

So glad i dont use AVG think my laptop has it do, doesnt go pirates on it tho

The next update of AVG has cleared the problem.

Update your AVG manually and the problem disappears. And AVG don't even bother to apologise or mentionit as a mistake on their site :(

I did the update, maybe im thinking of this wrong...but the virus is still in the virus vault...

If you restore the file, AVG fails to recognise it now.

Awesome, thanks!

Glad I could help everybody start. And thanks to OFxZeppers for explaining the other stuff.
And if your looking for another Virus Software, I've been hearing that Avast is pretty good.

NP, glad to be of help if I can.

I wouldnt rush off to another Antivirus due to this. Its not an uncommon occurrence, and it happened with Avast not terribly long ago. ;)

Strange, I got kinda the same thing. It said that a trojan was detected in the launcher. o_O

~ The Monkey Man

This is exactly what is happening, I recognize the name. Update your AVG, and allow access for Pirates as an exception or something like that. Sorry I can't remember exactly what I did to fix this before.

Me again, under resident shield add POTC to the exceptions, it's under manage exceptions. Good luck.

Thanks to Ethan in his post #18, I was able to fix the problem. Everything is working perfectly now. I just followed his instructions. Back to my Swashbuckler Piratetess on the test ocean. (lvl.11)
Have fun mateys!
:dancetl6:

I am glad the game works again! I was missing my rum!

Disney received my trouble ticket, called AVG and BLASTED them for sending out bogus virus defs that AGAIN misdiagnosed Launcher1.exe as a virus and corrected virus defs were sent out yesterday by AVG. You may now download and reinstall Pirates Online without worry and swashbuckle away! Problem solved.

And I didn't have to lift a finger. No spybot search and destroy, no dangerous exclusions entered into AVG (after all a REAL virus could actually attach to Launcher1.exe), just a 15 second submission to Disney tech support. That's why it's there folks...USE IT.

Your first time? I think you will get a 99.9% they tell you "Update your video drivers" or "Contact your ISP" as the solution to the problem, even if it was a bad password issue. Your 15 second submission probably went ignored for the most part, and the techs being yelled at on phone support took action if any. More likely people reported directly to AVG.. hey is this a virus? and AVG took it upon themselves to revise the signature they were looking for.

I'm more apt to believe AVG responded than Disney. They actually have customer "Service".

Customer service? Where's my hat?

I got incredibly irritated with the whole deal. I knew I would have to uninstall and reinstall anyway, so I just jettisoned AVG and went with avast!. I was looking for an excuse to change anyway.... AVG ticked me off when they messed up the pathways for me for my own protection...I don't need that.
Back to priating!

Still nothing...
 

I appreciate all the help people have offered, I see I was not the only one with this issue. I just loaded all my needed data into my flash drive, and I am just going to reformat. I dont want to spend 2-3hrs for pirates to download, install... then update, and result in it still not working properly. It only takes about an hour for me to reformat any how. Hope all the people who had to deal with this have got things resolved.

Larence Tuppington

I had this problem with my virus protection right now. Luckily when opening it, It said, "Allow this program"

Virus in Pirates Online???? *AVG FIX*
 

I turned my PC on, opened Firefox and then:


http://i30.tinypic.com/iylky0.jpg


:psmiley27: :psmiley27: :psmiley27: :psmiley27: :psmiley27:
Note that the game isn't open. I think it's safe, the launcher may have the same behavior as a trojan.

Happens all the time when AVG does and update. Here's the fix:

Starting Out:

1. Open AVG to the System Overview.
2. Go to "Tools > Advanced Settings".
3. Look for "PUP Exceptions" and Open It.
4. Click "Add Exception". When it brings up the little box asking for the file path, enter "C:\Program Files\Disney\Disney Online\PiratesOnline\Launcher1.exe".
5. Let it register where the file is located, then click ok and apply.
6. Now stay in the Advanced settings menu and go to "Resident Shield > Exceptions"
7. Click "Add Path" and navigate it to "C:\Program Files\Disney\Disney Online\PiratesOnline\"
8. Click apply, and attempt to open Pirates Online! It should open up from your Desktop. If the desktop button does not work, go to, Start > All Programs > Disney Pirates Of The Caribbean > Pirates Of The Caribbean Online.

So there you have it. That's how you Configure AVG to Work with Pirates Online.



and:

1. Open the AVG Control Center (icon down by the clock).
2. Click the "Check for Updates" button or select Check for Updates under the Service menu at the top.
3. If it prompts you for Internet of Folder, choose Internet.
4. If you haven't gotten it yet, there should be a small update available. Select it and install it.
5. Once it completes the update, go to the Program menu and launch the Virus Vault, or select Virus Vault from the list of items and click Open.
6. Find Launcher1.exe in the list (you may need/want to sort it by Date, most recent first).
7. Right click on it and choose "Restore File(s)."
8. Close the Virus Vault and the AVG Control Center.

Done
Fire up PotCO as normal!

Thanks Sarah, it worked! :piratear: Did this happen to you?

Its been a problem for some time with the game - anyone using AVG has to make sure they do these steps (and also watch out for AVG updates in case the settings need to be re-done) :)

Sarah gave out tech support???? And it WORKED???

(Just teasing.)

I had the same problem today. Thanks Sarah!

THANK YOU i JUST had this problem

AVG is at it again
 

If ya wake up and find ya can't connect and your shortcuts no longer work...
It's just AVG thinking POTCO is a trojan, again ....

* rolls eyes *

Jade

Yes, it's happening again. If you need help fixing the problem, please see here:

http://www.piratesonlineforums.com/f...ewpost&t=12264

^^Give that man a Ceee-gar! I had AVG anti-virus pop-up with a nice red window screaming trojan horse found with launcher.exe last night!!
Initially I was like, aw man your joking, after some super-antispyware scanning, there was no trojan found?
Confused I was, clicked on update my AVG, apparently all was well.
Still had trojan window message though. Trolled through here last night and found solution. The e-mail from AVG was not helpful as it stated detection was correct but could've been a false positive!!
^Followed Ethan's bit above and it solved the problem instantly!
Shame the scanning and trolling took so long, by the time it was fixed it was midnight! Another late gaming session took place needless to say though! :piratear:

Also see the following threads on the Norton Anti-Virus Fix for any more informaton required:

http://www.piratesonlineforums.com/f...887#post149887

http://www.piratesonlineforums.com/f...ad.php?t=12283

grrr yea i had it to, but its all good now, all you have to do is:

1) restart the computer

2) uninstall potco

3) install it again

4) put potco as an exeption on avg

Bah it got me too! Oh well I will just hope for an update.

WAIT! where and how do i find this???

"7. Click "Add Path" and navigate it to "C:\Program Files\Disney\Disney Online\PiratesOnline\"

i know just enough about computers to get into trouble... and i got as far as the "add path" part under the resident sheild exceptions... i can't find the disney file and have no idea where to look...

IT HAPPENED ANGAIN, avg is REALLY starting to tick me off

I will post a screen dump, its really easy and satisfying as well, as AVG is being paranoid just now.

I have had that happen to me once. It was near the end of my Norton year so I then switched to McAfee.

No problems so far!

If i may comment that I LOVE AVG it somehow let MALWARE on my computer that im trying to get rid of but it detects a game from disney as a virus >_>

The BEST virus protection is your own caution.
I generally don't use any virus protection software, so far all the computers I have used in the past 5 years have been clean.
I do scan weekly though with sever virus protection progams lol, I guess that counts as using virus protection :\
(I meant that I don't have them run in the background) ...

Hmm, i never had this problem. That's because i got Avast! Anti-Virus, it works wonders. If any of you ever get this problem again, try it, it helps. Just like the last poster that mentioned it.

Sorry to bump up old threads, but this is happening to me NOW. Exact same things. I have AVG 8.5 and it just randomly started going balistic over pirates when i booted up this morning. What am I to do? Im installing AVG 9 now, and hoping that will fix it. But I've been running AVG 8.5 fine with pirates until now.

This is the solution if you are having an issue with AVG blocking you because of a Trojan Virus.

How do I do this if I already unistalled pirates and it won't let me fully reinstall the game? It installs halfway, virus pops up, then gives me an icon but it will not run.

ok so im not the only one who has this stuff happening. i completely deleted the disney folder out of my computer files and tried to re load completely. it still wont let me. my sheur2.blxh or something to that effect, also had no google results. avg is frustrating.

Okay, figured it out. Just reinstall, even though it won't really work. Then follow the same steps. Pirates is gonna have to redo all the updates, and it takes forever, but then the icon and everything will once again work. To think I spent 5 hours deteling programs and files and freaking out over nothing. :)

this hasnt happend to me

I use a Mac...
If this virus WAS a real threat, it wouldn't affect me...
Would it...?
What should I do?
Maybe I should ask Jason Davy again...
CS~

Argh, this happened to me too today. I deleated PotC already, but glad to know it is not something that I should be worring to much about. Now off I go to reinstall it, again, for the 10th time today...

Same thing here, yet again, not sure why AVG can't get it through their thick skulls that it's not a virus. BTW Disney does keep telling them this.

It just happened to me too. Avg brought up a small list of trogans from the launcher...

Well, I don't even have AVG, and I wasn't alerted of anything, and it appears as though it's not that big of a deal so...
I feel better. :D
CS~

Virus on the Launcher?
 

Hey,

I just started playing again today after about a year away, and since I updated on 17th, I'm told the launcher (Launcher1.exe) is infected with a "Trojan horse SHeur2.BLXH"

I uninstalled, run a virus scanner which said the computer was clear, and installed again, and upon installing, I was told it was infected with the same virus.

Has anyone else had this? My virus scanner is AVG. I looked on their website and they said it was probably a false positive, but I just wanted to make sure.

Yes, it's false. It has something to do with the new invasions update. For anyone who can't figure it out while re-installing:

In this case, if it is uninstalled already, you have to try to install it as far as it will go. Then, you find the folder where it is installing by going to:

1.Resident Shield
2. Manage Exceptions
3. Add Path
4. Find wherever the folder is installing currently. For me, it was the program files/ Disney/ Pirates Online.
5. Click Apply

This is exactly what I did yesterday after it was re-installing and it worked just fine. Hopefully you will be able to find the path, I did.

had a similar problem...
 

tried clicking on the desk top icon and it said the launcher had been moved... so i came here to see if there were reported issues... saw others had AVG issues (AGAIN) and figured i'd check... Yup. it was in my virus vault. all i did was clicked on it to highlight it, then hit restore for both items. the desk top launcher worked just fine! :pirate2:

ok, so how odd is this? a few days after the sheur2.blxh thing was preventing me from doing anything, i uninstalled and reinstalled without messing with avg, and it took!