In MAJOR need of some help!

ok here goes..... I just returned from Iraq and found out that while I was gone my antivirus subscription expired and my wife didn't renew it! As you are already thinking by now..I am infected BAD! At first I had a black screen saying that I was infected with malware, and then I kept getting a pop up saying it had detected a virus called trojandownloader.xs ! I used some new antivirus software and it removed some nasties from my system, but it wouldn't get rid of the trojandownloader. Now here is where it goes from bad to worse. Now when I turn on my computer everything starts off normal by giving me the welcome screen to select either my username or log on as a guest but that is the only normal thing. After I log in I get the white screen asking me to restore my active desktop, but it only lasts for about 5 seconds and then all the icons blink once; then come back; then blick again and come back. Then all the icons and taskbar disappear and my normal desktop background picture appears, but nothing else. Nothing works! I can't right click, and pressing ctrl + alt + del causes an error message to pop up saying that the administrater has disabled the task manager!!! I am the administrater, and I didn't disable anything. So long story short....My comp is practically useless, and I have no idea what to do. Please HELP!!!!!!!!!!

 

Thanks for the great advise, but that comp won't connect to the internet, and like I said; it has no icons or task bar/start menu. I think it might be beyond repair.

 

I am still MAJORly screwed!!! Anyone know what to do?

 

Hi mrarmyguy!
Welcome to Major Geeks!

Sorry it's taken some time to get to you. We are over busy at the moment. Please go to another computer which does have an internet connection and download the following. Put them on a transferable disk and install them onto the infected computer and run them. There are different instructions for the different operating systems, so let us know what questions you have.

Go here and download Combofix. This needs to be installed to the desktop of the infected computer. ComboFix

Go here and download MGTools. When you install it, it has to be installed to the root drive which is C:\ for most computers. Using MGTools

and go here and get SmitFraud Fix: Removing Zlob aka SmitFraud, SpySheriff, Infections

See these webpages for more information:

READ & RUN ME FIRST - if you scroll down to the bottom of this page, you'll see the links to the instructions for the different operating systems.

How to properly run Combofix

Try running the above on the infected computer. If you are able to do any or all of them, please attach the logs they produce.

Let me know if you have any questions.
abri