rundll32.exe

Remove rundll32.exe in start up.

Page 1 of 1

3 Replies - 1669 Views - Last Post: 28 October 2010 - 02:15 AM

#1 cortazar11   User is offline

  • New D.I.C Head

Reputation: 0
  • View blog
  • Posts: 11
  • Joined: 20-July 10

rundll32.exe

Posted 27 October 2010 - 12:00 PM

Hi,

It seems Iīve already removed a trojan (sshnas21.dll) after applying a scan of the anti-virus.

Anyway , there is still in the start-up as "rundll32.exe C:\Users\MyName\AppData\Local\Temp\sshnas21.exe, GetHandle ".

The file is not in any folder of the computer but it still shows in start-up, though I can disable.

Is any problem to keep it with the command rundll32.exe or I need to remove it completely, even in start-up.


Thanks

Is This A Good Question/Topic? 0
  • +

Replies To: rundll32.exe

#2 calvinthedestroyer   User is offline

  • D.I.C Lover

Reputation: 172
  • View blog
  • Posts: 1,933
  • Joined: 13-October 07

Re: rundll32.exe

Posted 27 October 2010 - 12:13 PM

After consulting Google, I would recommended disabling it.
google sshnas.exe

If you can't find "rundll32.exe C:\Users\MyName\AppData\Local\Temp\sshnas21.exe, GetHandle " with in the MSCONFIG, then try looking for it in the windows registry.
Was This Post Helpful? 0
  • +
  • -

#3 no2pencil   User is online

  • Professor Snuggly Pants
  • member icon

Reputation: 6824
  • View blog
  • Posts: 31,471
  • Joined: 10-May 07

Re: rundll32.exe

Posted 27 October 2010 - 06:26 PM

Very few legitimate programs require rundll32.exe to start. Almost always this is a dead giveaway of a malicious program.

I would recommend renaming the program sshnas21, which is most likely set to hidden & why you can't find it (or it was removed), & if you can live without it, remove it. If the file is missing, then just trash the starup link.
Was This Post Helpful? 0
  • +
  • -

#4 cortazar11   User is offline

  • New D.I.C Head

Reputation: 0
  • View blog
  • Posts: 11
  • Joined: 20-July 10

Re: rundll32.exe

Posted 28 October 2010 - 02:15 AM

I've seen the location of this file in the start-up windows:
"HKCU\Software\Microsoft\Windows\CurrentVersion\Run"

Any way after opening this locations in the windows registry I canīt find it there.

Could be the same file with another name? Could be the default?

There is one rundll32.dll but with pointing another file:
"rundll32.exe oobefldr.dll, ShowWelcomeCenter" Could be this?



Thanks
Was This Post Helpful? 0
  • +
  • -

Page 1 of 1