Back to Forums








View Full Version : cmd.exe again...dxsetu.exe trojan


Clarkeyboy4685
February 1st, 2005, 23:03 PM
I've read many posts about this but not found a solution to mine :mad: , so here we go! :p

Upon windows starting the file cmd.exe runs 8-10times(yes sometimes it is different lol ) in my "processes" in task manager, half of them under the user name "chriss" and the other half under the user name "system", they drain resources immediately and it can be slow clicking kill task on all of them and sometimes my computer will freeze. I do also sometimes get alerts of a virus, with the threat name backdoor.colfusion appearing in C:\DOCUME~1\chriss\LOCALS~1\Temp and C:\WINDOWS\TEMP. i will get the same number of warnings as the number of cmd.exe files that have run on start-up but i do not always get virus alerts so i assume it is not always activated?

this problem started when i downloaded a file, i have obviously deleted said file. Any advice? full virus scans in save mode remove all the viruses but i have done this twice and still get virus messages and the cmd.exe problem so that doesn't work!!

i run windows XP
EDIT: the file called dxsetu.exe runs on start-up aswell despite me deselecting it in msconfig...

cash_site
February 2nd, 2005, 04:00 AM
What are the virus messages you are getting? Does it specify the actual virus? It was good that you did a virus scan in safe mode, however, some virus scanners can only detect and NOT clean certain viruses. You might need to download a Virus remover tool for that particular virus... ie MyDoom Remover or Zafi.B etc etc etc

In saying that, I would also recommended doing a spyware/adware scan on your comp too, as it may detect other problems...

FastGame
February 2nd, 2005, 05:38 AM
dxsetu.exe is a nasty trojan, if its deeply embeded it can be hard to remove.

Have you had this problem long ? do you have a prior System Restore Point you could go back to ?

Reverend
February 2nd, 2005, 18:52 PM
There's a solution posted over at DaniWeb which may help.Read post #2 in this thread (http://www.daniweb.com/techtalkforums/thread16507.html)

Clarkeyboy4685
February 3rd, 2005, 21:38 PM
THANKS! had that problem for so long now it's all sorted :D :D :D