Sheur2.QLA Virus Found in Pirates Online (Merged)

[Commodore Larence]

Ok, so I tried to launch POTCO just now, I have been playing the game for over a year, no issues with my AVG finding any thing it thought was harmful in it.... I launch, and AVG tells me it has found a threat called "Sheur2.QLA" while attempting to launch the game from the start menu.... I attempted to ignore the threat, because I felt it was a false positive... After that the game refused to load, well then I moved the file to the vault, but the Launcher.exe was never found, so then no load again.... I restored the file from the vault, then AVG freaked out the same as before..... Have any of you experienced this? My game refuses to load now even if I ignore the threat, so I uninstalled POTCO, but there is a small thought in the back of my mind that I might have gotten some sort of bizzare virus that has infected POTCO possibly to gain my access information some how. I may try reloading the game again this week, or just reformatting for the heck of it just to be safe. I never have heard of this before. Thanks for any info any one might have.

Larence Tuppington

FIX:

Originally Posted by Ethan

Oh yea baby! I got the fix for AVG! I'll list the Steps you need to take to let it run Pirates.

Starting Out:

1. Open AVG to the System Overview.
2. Go to "Tools > Advanced Settings".
3. Look for "PUP Exceptions" and Open It.
4. Click "Add Exception". When it brings up the little box asking for the file path, enter "C:\Program Files\Disney\Disney Online\PiratesOnline\Launcher1.exe".
5. Let it register where the file is located, then click ok and apply.
6. Now stay in the Advanced settings menu and go to "Resident Shield > Exceptions"
7. Click "Add Path" and navigate it to "C:\Program Files\Disney\Disney Online\PiratesOnline\"
8. Click apply, and attempt to open Pirates Online! It should open up from your Desktop. If the desktop button does not work, go to, Start > All Programs > Disney Pirates Of The Caribbean > Pirates Of The Caribbean Online.

So there you have it. That's how you Configure AVG to Work with Pirates Online.

Sorry it took so long, but those Disney Live Support People are bad...

[swashbuckler II]

Yeah this happened to me before, and a couple of friends, Try using spybot-search and destroy if you have it, Scan it then delete it. If it doesnt work tell me.

[ancrom]

I got the same thing an hour ago when I tried to install the test server download.
exactly the same AVG told me it was a Trojan Horse Sheur2.qla

[micromouse]

I SINCERELY doubt that the sheur2.QLA Trojan Threat error mysteriously appeared on your screen "before, and a couple of friends." See there is no such thing as a Trojan signature named "sheur2.QLA". That warning is a generic message caused by the bloodhound heuristics of AVG interpreting a file it sees as potentially dangerous. Did you have AVG installed and running when you saw the messages? Did your couple of other friends also just happen to have AVG running on their systems?? Because those conditions would need to be met for what you just said to be true.

I think what you're referring to is actually a problem that happened LAST YEAR where AVG was detecting Toontown's Launcher1 as a problem but AVG updated their virus definitions and that problem was resolved. This sheur2.QLA thing is brand new and outside of this single forum entry, Google can't find a single other instance of it on the net. In fact, when I went to AVG's own site and searched for the error THERE, a search of their own virus definitions came up with nothing. So I think something between Disney's launcher program and AVG has gone awry again and technical support needs to be notified NOW!

Why are you telling people to load up Spybot Search and Destroy? What exactly are they supposed to be scanning? Can you specifiy a file or directory? If something is found, what are you instructing them to delete? "IT"??? Delete WHAT!?

I'm opening a trouble ticket with Disney's technical support right now to find out what's REALLY going on and I'm pretty sure we'll see yet another updated definitions file come out of AVG this week so the problem can be fixed again.

In the meantime...you're welcome to Search and Destroy all you like...but without more specific information from Mr. Swashbuckler there, I think you'll likely be chasing phantoms and ghosts and just make your life unnecessarily miserable since you have no idea WHAT to scan or delete. Please do me a favor and open a trouble ticket as well so they see it's affecting multiple users and not just one. The URL to open a ticket with them is here: BugSubmitReport

[Ethan]

It happened to me this morning. Try using that "Spybot-Search and Destroy" Program. But also, run a scan where your downloads are held, AVG should be able to find a Trojan Horse. I found like 6 and 2 virus's this morning.

[niltag]

Same exact thing happened to me, for both live an test. Unistalled reinstalled no luck!

[Nicholasfunstuff]

Me too. It happened to me.

Right now I am using Vundo Fix to see if it fixes the problem.

I also e-mailed the pirates online team. Maybe try to call them or talk to them in live chat.

Well Vundo Fix didn't find anything and I went to AVG.com and found this http://www.avg.com/download-update
Look and the bottom and it says; Added detection of new variant of Worm/Autoit.RQN, new variants of trojans PSW.Generic6.BDIY, SHeur2.QNR, Generic12.BPHA, PSW.Ldpinch.XAQ, PSW.OnlineGames.BPTA.

Maybe they think that Sheur2.QLA is Sheur2.QNR. Darn AVG.

[Ethan]

Is there anyway to get AVG to let Pirates Bypass?

[Nicholasfunstuff]

Originally Posted by Ethan

Is there anyway to get AVG to let Pirates Bypass?

I don't know, well I know this I will keep updating AVG until it is fixed. And maybe I need to wait a day for my sent e-mail to pirates online replies back.

[Ethan]

I've updated my AVG 3-4 times today. It says it has the latest database. Oh, and they won't respond to emails for a few hours. They haven't "Opened" yet. I'll be on with Live Support as soon as they open to.

[Sarah]

Seems to be a running problem with AVG...here's a pretty old thread from one of the last times this happened:

http://www.piratesonlineforums.com/f...ead.php?t=4639

I'm going to have to play around with mine and see if I'm getting the same thing.

Let us know what live support says Ethan!

[Sinai]

What really irks me is that AVG goes ahead and deletes the file even when you tell it to ignore it. That's the kind of babysitting I don't need.

[Nicholasfunstuff]

I am gonna call them see what they can do. Live Chat is closed.

Well I need to wait at Noon EST time until the phone support can answer. And it closes at 4 PM EST.

[Ethan]

In that thread you gave me, it said that using Avast Anti-virus would fix the problem. I was just wondering if Avast is as good as AVG?

[Nicholasfunstuff]

I hope they fix it.