[cortazar11]

Hi,

It seems I´ve already removed a trojan (sshnas21.dll) after applying a scan of the anti-virus.

Anyway , there is still in the start-up as "rundll32.exe C:\Users\MyName\AppData\Local\Temp\sshnas21.exe, GetHandle ".

The file is not in any folder of the computer but it still shows in start-up, though I can disable.

Is any problem to keep it with the command rundll32.exe or I need to remove it completely, even in start-up.


Thanks

[calvinthedestroyer]

After consulting Google, I would recommended disabling it.
google sshnas.exe

If you can't find "rundll32.exe C:\Users\MyName\AppData\Local\Temp\sshnas21.exe, GetHandle " with in the MSCONFIG, then try looking for it in the windows registry.

[no2pencil]

Very few legitimate programs require rundll32.exe to start. Almost always this is a dead giveaway of a malicious program.

I would recommend renaming the program sshnas21, which is most likely set to hidden & why you can't find it (or it was removed), & if you can live without it, remove it. If the file is missing, then just trash the starup link.

[cortazar11]

I've seen the location of this file in the start-up windows:
"HKCU\Software\Microsoft\Windows\CurrentVersion\Run"

Any way after opening this locations in the windows registry I can´t find it there.

Could be the same file with another name? Could be the default?

There is one rundll32.dll but with pointing another file:
"rundll32.exe oobefldr.dll, ShowWelcomeCenter" Could be this?



Thanks