RunDLL startup process bad command line

Hello,

I reach you guys after spending hours trying to understand and fix what's going on here on my computer.

I'm not a computer engineer but I know how to deal with windows, however this time, I've been spending way too much time for something that I couldn't fix and that is very annoying. Any help is welcome.

First, I don't want to reinstall Windows. I know this would fix my issue, but I have far way too many softwares installed and dont want to reinstall everything.

Problem : Classic "RunDLL" error message at startup. see screengrab. Show at each startup.

Troubleshoot i've been through and hints that I've found :

I reckon my computer have been infected with a virus, that my malwarebytes have quarantined and destroy, but there is still some device startup indication that make runDLL try to load this malicious DLL "BPO_Me something". Somehow, I don't find it anywhere in Autoruns nor task planifier.

The path not tilde-reduced is this one : "C:\Users\lader\AppData\Local\WindowBridge\EveltFicjer".

I know it because when i use Windows Run to go to the tilde path, it open this full path.

Here is the content of the folder (which is not hidden. I've no trouble navigating to this folder, but there isn't this malicious "BPO_ME~1.DLL" - I reckon my anti malware had remove it.

I've spend HOURS in AUTORUN and PROCESS MONITOR from sysinternals trying to find some hints..

I didn't find ANY entry that correspond to this specific rundll call in Autorun.

However i've found a few more informations on process monitor. I've add a filter with the specific path as follow and i've got some interesting output

output :

See the "Command Line" row ?

I found the same output in wmic command :

wmic process where "name='rundll32.exe'" >C:\users\lader\desktop\log.txt

>CommandLine >C:\WINDOWS\SysWOW64\RUNDLL32.EXE C:\Users\lader\AppData\Local\WINDOW~1\EVELTF~1\BPO_ME~1.DLL fdBta_Srcugabt

So If I understand what I see, I reckon this command line is the one that call at each startup this malicious DLL.

Here's my problem : I CAN'T GET RID OF THIS LINE. Am I doing something wrong here ? Do I miss the point ? How to erase this command line ? How to make windows ignore it ?

I've search through the registry, and find some occurence of this malicious dll at this path :

Ordinateur\HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\RunMRU

I've removed the "H and "J" value, that contains the path C:\Users\lader\AppData\Local\WINDOW~1\EVELTF~1\BPO_ME~1.DLL, hoping that this will do the fix. But not at all. And the "G" value keeps refilling it itself with this "AppData\local\window~1\EVELTF~1" line.

So I'm a little bit lost.. I don't know what to do next.

Sorry if it's a bit messy, and again thank you for any help. Wish you all a happy new year.

Cheers