I used ESET Endpoint security and found "Operating memory » rundll32.exe(6048) - a variant of Win32/Korplug.HT trojan - cleaned by deleting". However, I rescanned many times but still got the same issue. Was it really cleaned? How to remove this trojan?