Help please threat detected

[razzelranz]

so one please help me went to open mirrevenge and got this pop up



THREAT DETECTED


c:\programs files\ mirrevenge \ mir2 exe

virus identifed win32/ thermida



what is this please help

[Lone]

well i know in the past i have had that on my pc and it didnt seem to do a whole lot - other than pop up and said pretty much that.

I have just done a google search for it and it appears to actually be the program that was used to pack the software you recently downloaded.

if you start having strange happenings id suggest you run Virus Scans/AntiSpyware scans
Spybot search and destroy. -> scan for spyware
Ad-Aware SE Personal Edition. -> scan for adware
Http://www.kaspersky.com/virusscanner -> scan for viruses

(if they dont pick anything up and you dont have anything weird happening then i assume it is a legit copy of the Thermida software packing tool.)


Im not sure exactly where it would of come from though sorry >.<

Hope it helps


sorry i cant help much more >.<





Have you recently autopatched? it looks like Sukara is getting a similar problem although he doesnt define thermida

[razzelranz]

do u mean it has came from win rar ??

[razzelranz]

i clicked egnore and windows popuped and started to configure mir revenge

i really have not a clue what is going on i wish i was a geek

[Lone]

im not 100% sure - but that would be my guess.

i just did a forum search on it and found my post i made when Nasir got it - he ended up getting it from a piece of map editing software which i believe was Zipped.


(i spent a while going over it >.<)

Anyway what i found was

when i had thermida on my pc it was trying to connect to a server of some kind which didnt exist so it couldof been a virus but because the server it was trying to get incontact with didnt exist it couldnt do any of its nasty stuff.

i ended up using Spybot/Adaware/KasperSky (as mentioned above) and i believe that got rid of it.

So it would be that you ended up downloading a file that was at one point rather nastily infected with something but the chances are that its now a dead infection so removal should be fairly simple.

do some scans and see what gets picked up.

if it ends up wanting to delete the Mir.exe delete it and empty the recycle bin to make sure its gone all together

and let me know so i can upload a copy of my exe for you tonight

ALLLLSOO --- Tip!

when your doing these scans its best to be in SafeMode with Networking - this will allow the pc to scan files and folder that would normally be locked because they get used by the operating system.



Let me know how you go


All best

Lone

[razzelranz]

thank you i am doing a scan now !

[Lone]

kk matey - if i get any extra info from Sakura ill let you know.

[razzelranz]

also i dont konw how to put my pc in safe mode im a noob when it comes to pc's lol

[Lone]

ummm are you on Windows XP or Vista? (im not sure if its different but whilst you check i can double check the method )brb



If its XP

when you reboot hold down the F8 key and it will load the advanced boot option which will show the one you need just looking for Vista instructions.

(if you havent updated the scans before you enter safemode make sure you choose safemode with networking as this will allow you to connect to the internet as well which will allow the scans to update themselve )

if your all updated simply use Safemode .



it appears to be the same for Vista

Soooo

When you restart the pc just hold your finger on the F8 key until the menu appear

all best

[razzelranz]

i need new mir exe m8 when ur rdy thanks