Announcement

Collapse
No announcement yet.

PoL Trojan?!?!

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • PoL Trojan?!?!

    I played FFXI for a few hours today and logged off and shut down my pc. 2 hour later I came back and wanted to play again and I started up the PoL and my anti Virus found a deleted a Trojan virus that was hiding with in the PoL file!

    Now, I need to re install the PoL, but because of this "trojan" my computer found in the file, I can not uninstall it, nor can I reinstall. When I do a roll back, it says it found the trojan again, and deletes it. I have to delete the PoL to re install it but... I can not delete it. Any help please?!?!

  • #2
    Re: PoL Trojan?!?!

    What antivirus software are you using? I have heard of false positives from mcafee and norton saying pol.exe was a virus.
    Thanks Kazuki.
    Dragoon Equipment

    Comment


    • #3
      Re: PoL Trojan?!?!

      I am using Nortan, but idk why it would say that though. I've had the PoL veiwer installed on my PC for a while.

      It is letting my unistall it this time though. I will post an update once I get it reinstalled.

      Comment


      • #4
        Re: PoL Trojan?!?!

        For what it's worth I (sadly) use Norton as well and it's never tripped up on any of my PlayOnline files.

        Comment


        • #5
          Re: PoL Trojan?!?!

          Originally posted by Thalyn View Post
          For what it's worth I (sadly) use Norton as well and it's never tripped up on any of my PlayOnline files.
          I know. I found it weird that it just started doing this crap. I was able to play it fine ealier today and now this...

          <edit> I forgot that I was using windows vista... I have to find the link to download the vista version...

          Comment


          • #6
            Re: PoL Trojan?!?!

            I've always thought the "install" procedure on Windows was stupid. But then I've used Macs since before Win 3, where you can run an app from anywhere without having to install anything.

            A suggestion is to figure out which file (pol.exe?) it is choking on, delete it, then go to that directory and ECHO ZZZ >POL.EXE from the command line. Then cross your fingers and try to uninstall it.
            Elwynn @ Fairy Elwynbelwyn @ Sylph | PS2 PC
            99 Everything, mostly play PUP, WHM, and sometimes BST
            F13.1 W60.0 S54.1 G63.2 Cl70.0+1 L70.0 B54.0 A69.4 Co59.6

            >2012
            >not having all jobs at 99


            Quasilumin : Examination complete. Examinee unregistered. Kuluu syndrome detected. Displays tendency towards cowardice. Report to infirmary for treatment.

            Comment


            • #7
              Re: PoL Trojan?!?!

              I've always used windows though. Its what I grew up using so it will be a while before I use a diff system. I was finally able to unistall it, and reinstall (Installed the wrong one >.< but I now have the right one installing atm). Hope theres no huge update that I have to run though...

              <edit> Go figure. Update. Got an hour until I know I can play the game again...

              ---------- Post added at 08:55 PM ---------- Previous post was at 08:02 PM ----------

              ... As Pol is updating McAfee keeps popping up saying this:

              About this Trojan
              Detected: Artemis!0BD381EB8525 (Trojan), Artemis!0BD381EB8525 (Trojan)
              Location: C:\Program Files\PlayOnline\SquareEnix\PlayOnlineViewer\patchfiles\PlayOnlineViewer\viewer\com\polcore.dll.tmp2

              Any help please? It also keeps closing my internet browser when ithis pops up. please help.
              Last edited by Takelli; 09-04-2009, 04:19 PM.

              Comment


              • #8
                Re: PoL Trojan?!?!

                Originally posted by Takelli View Post

                Any help please? It also keeps closing my internet browser when ithis pops up. please help.
                It might be one of those viruses related to that virus my cousin had recently. It wouldn't let him open malwarebytes to get rid of it. IIRC it was Antispyware 2010, bastard blocked his antivirus and his antispyware programs from opening up. The only way to open them was to go to the root folder and rename them to something else, but for some reason the thing wouldn't let him rename them. Only thing I could think to try was to have him install the software on another computer and then use a CD to bring the launch exe file to the infected computer with a changed name. Then take the file and put it in the root folder for the program and attempt to run it. Also, did you try running norton in safe mode while trying to kill it? If you have access to another computer, you may want to download combofix and give it a whirl.
                {New Sig in the works}
                -----------------------
                "There will come a day when the world will realize that Superman can no longer create miracles. If my name was Superman, that day would be today." 4/29/2009 - Me

                Originally posted by Aksannyi
                "Hello! 100+3 Leathercrafting, your materials, 5k! Mention code LTH74 for a special discount!" - they'd get blisted by everyone they sent that to.
                Originally posted by Solymir
                What do you have against Ants? Is iVirus some new Apple product?

                Comment


                • #9
                  Re: PoL Trojan?!?!

                  Its not on safe mode. I don't have another PC as well.

                  But I'm not having issues opening the file, I can open it and everything, I just cant update the PoL as it keeps finding a Trojan on my PC. I have no Viruses that my McaFee cant find so idk why I am having issues.

                  Also the root folder, where is that located? I cant remember wha the root folder is...

                  Comment


                  • #10
                    Re: PoL Trojan?!?!

                    Originally posted by Takelli View Post
                    Its not on safe mode. I don't have another PC as well.
                    Try running the scan in Safe Mode and see if it removes it. If you can run safe mode with networking, try to download and run malwarebytes and combofix after you run the scan in safe mode.

                    Originally posted by Takelli View Post
                    Also the root folder, where is that located? I cant remember wha the root folder is...
                    For example, most of the programs on your desktop will be shortcuts, if you right-click and go to Properties> and click Find Target> that would put you in the root folder for that particular application. So basically i was telling him to rename the actual program that the shortcuts are linked to in their install folders. But, if you can open your programs then it may not apply to you then.
                    {New Sig in the works}
                    -----------------------
                    "There will come a day when the world will realize that Superman can no longer create miracles. If my name was Superman, that day would be today." 4/29/2009 - Me

                    Originally posted by Aksannyi
                    "Hello! 100+3 Leathercrafting, your materials, 5k! Mention code LTH74 for a special discount!" - they'd get blisted by everyone they sent that to.
                    Originally posted by Solymir
                    What do you have against Ants? Is iVirus some new Apple product?

                    Comment


                    • #11
                      Re: PoL Trojan?!?!

                      Well... I was trying to rename the folder and it kept asking for my permission. I kept clicking Retry and it wasnt letting me.

                      I've never done a safe mode scan. I usually just set it to scan then leave the computer for a few hours and come back when its done.

                      <Edit> I renamed the file itself but now its not letting me open the file. Maybe I'll have to redo it.

                      A box keeps popping that says:

                      "The feature that you are trying to use is on a network resource that is unavailable.

                      Cklick OK to try again, or enter an alter net path to a folder containing the installation package "Playonlineviewer_TetraMaster.msi" in the box below."

                      When I do that, and go to the computer files to select it, the program freezes and then it crashes.

                      <Edit 2> I changed the name or the program back, and now it works fine again. Its going through the update again. And it doing the same thing again...
                      Last edited by Takelli; 09-04-2009, 05:51 PM.

                      Comment


                      • #12
                        Re: PoL Trojan?!?!

                        Isn't there a way, with Norton, to declare the file clean or have it skip or ignore it?

                        Comment


                        • #13
                          Re: PoL Trojan?!?!

                          Well, I thought I wa susing Norton, its actually McAfee though. But idk what its doing atm. I may get a new anti-virus as this one is really starting to piss me off.

                          I did download STOPZilla and it found 9 ExecVariant.C trojans when it first started up! Its making me think that I may not be using the bst antivirus now since it found those...

                          Comment


                          • #14
                            Re: PoL Trojan?!?!

                            Originally posted by Takelli View Post
                            STOPZilla
                            Why you not use malwarebytes and combofix? y frien?



                            *Image borrowed from ytmnd*
                            {New Sig in the works}
                            -----------------------
                            "There will come a day when the world will realize that Superman can no longer create miracles. If my name was Superman, that day would be today." 4/29/2009 - Me

                            Originally posted by Aksannyi
                            "Hello! 100+3 Leathercrafting, your materials, 5k! Mention code LTH74 for a special discount!" - they'd get blisted by everyone they sent that to.
                            Originally posted by Solymir
                            What do you have against Ants? Is iVirus some new Apple product?

                            Comment


                            • #15
                              Re: PoL Trojan?!?!

                              Nice Pick XD

                              I looked at the Combofix, and said that I shouldn't use it unless I know some one that is here that can help me with it.

                              As for the malewarebyte I didn't see you say anything about it. I used to use Addaware but this thing is finding mor stuff than adaware... It just found another ExecVariant.C Trojan in my PoL folder >.< But I just installed PoL, how can it have a trojan in it? :/

                              The thing is only at 18% atm though... Its taking a while...

                              Comment

                              Working...
                              X