Server Busy Virus + Can't Launch IE or Mozilla + Windows Freezes
 

Hello, All,

Thanks for the help in advance. My husband's computer had attracted a number of viruses - Virtumonde, Zedo, etc. - that I've since removed. However, yesterday, a "sever busy" pop-up window started appearing, and windows would freeze after about 3 minutes of normal operation. At that point, no applications could be launched, though I could alt-tab between applications that were ALREADY launched.

The taskbar would freeze, I couldn't shut anything down, and the quicklaunch buttons wouldn't work either. Nor could I access the internet.

I guess I should make this all present tense. Although I've run both CCleaner and Malwarebytes and Spyware S&D in safe mode with system folders showing and system restore off, etc.... nothing. And since I can't access the internet any longer on his computer, even when it first starts up ( when I attempt to launch Mozilla, nothing happens ), I can't download Hijack This.

I had previously thought it was an issue with Spyware S&D's TeaTimer, so I disabled that in msconfig and a few other programs that weren't needed... but yeah, still having issues.

Any suggestions? Also of note is that when the taskbar freezes, a thin black line appears on the bottom of the start button.

Again, thanks for the help in advance!

Re: Server Busy Virus + Can't Launch IE or Mozilla + Windows Freezes
 

Do you have the log from MBA-M? This is a program which isn't supposed to be run in Safe Mode but in normal mode. You are correct about TeaTimer. Leave it off, it interferes with some fixes attempted.
I don't know what firewall you are using or even if there is a firewall involved, but you might try turning this off and see if it helps.
Also don't know the operating system but have you tried Safe Boot with Networking? This allows the computer to boot in safe mode but also allows internet service without the unnecessary items which may be running during normal boot.
Is there a way you can get the log and post it from the computer you are using now?
Can you download HJT to another computer, burn it to a disk and then put it on the affected computer? If you can do that then try to get the log and post it back here.
System Restore should also be left ON until the computer is clean. After it is clean is when you then reset it. It is better to have at least something to go back to, even if infection is involved, rather than nothing which is what you have by turning off System Restore because that will erase all restore points. It is too late for that now just remember that in the future.
Judy

Re: Server Busy Virus + Can't Launch IE or Mozilla + Windows Freezes
 

Thank you for responding, Judy.

I realized that I could Gtalk files back and forth, so I sent HijackThis and downloaded it to my husband's cpu.

Here's that log:

So, now what? : )

Re: Server Busy Virus + Can't Launch IE or Mozilla + Windows Freezes
 

Let me look through all this and I will get back to you. This is a wireless connection correct? Have you tried a hard connection, is that possible?

Re: Server Busy Virus + Can't Launch IE or Mozilla + Windows Freezes
 

Can you run HJT on the infected machine? If so run it again.
Place a checkmark next to this entry
O20 - AppInit_DLLs: gmuxlx.dll
Then click the Fix Checked button.
Exit HJT.
Reboot the system and see what happens.
Judy

Re: Server Busy Virus + Can't Launch IE or Mozilla + Windows Freezes
 

Okay, I did what you said. I'm not seeing any server busy notices yet, but the taskbar still froze as soon as I attempted to open my documents, and Mozilla wouldn't open.

It didn't seem NEARLY as sluggish opening Windows as it did previously, though.

Then, when I shut down ( which I had to do manually), I got a "tcsd_win32.exe" application error.

I thought that might have had to do with some non-essential system32 files I'd removed from startup, so I replaced them and rebooted again.

I tried loading Mozilla again, and no dice. I can open IE, but it continually says, "connecting," and when I try searching for anything in the search bar, it gives me that, "OH NO YOU DON'T" Windows gong. My internet connection is just fine, 'cause I can log on to gTalk.

After about ten minutes of various navigating, I got the "sever busy" window pop-up after opening QuickBooks.

Weird, huh?

Re: Server Busy Virus + Can't Launch IE or Mozilla + Windows Freezes
 

How did you know for sure that these were unnecessary?
The file you get the error from is associated with NTRU Cryptosystems
what is the exact error that you get?

Re: Server Busy Virus + Can't Launch IE or Mozilla + Windows Freezes
 

I didn't get the error after I restored those processes to startup, and I googled them to see if it'd cause problems to remove them from start up, and removed the ones that the "experts" said wouldn't cause problems.

That's no longer an issue... it's more of the freezing, internet-not-working thing now. SO much better. ;)

Re: Server Busy Virus + Can't Launch IE or Mozilla + Windows Freezes
 

Well that NTRU Cryptosystems program has to do with your wireless network so maybe the program is damaged.
The system freezes definitely shows there is "something" trying to work or not working right in the background.
Were the freezes the reason you turned off some of those system32 files? While some may not be necessary they are often tied together with others which are necessary and sometimes turning off one may turn off many others that you didn't mean to disable. This is why it is always recommended that each and every one be totally researched before turn them off.
Did the freezing and internet not working come before or after the clean ups?
Can you give me a list of those system32 files you turned off and then turned back on?

Re: Server Busy Virus + Can't Launch IE or Mozilla + Windows Freezes
 

Go to Start, Control Panel, Administrative Tools, Event Viewer. Look in Applications and also System and locate errors which may give an indication as to what is causing these Server busy errors.
Judy