What is sshnas21.dll, How to remove sshnas21.dll


sshnas21.dll is a harmful program.

remove It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program.
If that does not help, then ask us for help in the Spyware removal forum.

Name: sshnas21
Filename: sshnas21.dll
Registry key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | LosAlamos
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | Canaveral
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SSHNAS
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SSHNAS

Command: C:\Windows\System32\sshnas21.dll
Startup Type: Service
HijackThis Category: O4
HijackThis Line:

O4 – HKCU\..\Run: [LosAlamos] rundll32.exe C:\Windows\system32\sshnas21.dll,DllWork
O4 – HKCU\..\Run: [Canaveral] rundll32.exe C:\Users\username\AppData\Local\Temp\sshnas21.dll,BackupReadW

Combofix/RSIT Line:

S2 SSHNAS;SSHNAS; C:\WINDOWS\system32\svchost.exe

Description: this is a new version of sshnas.dll trojan (trojan FakeAlert)

How to remove: use these sshnas.dll removal instructions.

This entry was posted on Thursday, January 14th, 2010 at 11:41 pm and is filed under O4, Service, Trojan. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

10 Responses to “What is sshnas21.dll, How to remove sshnas21.dll”

  1. Vanessa R. Says:
    February 21st, 2010 at 6:00 pm

    Tenia problemas con los troyanos y al seguir los pasos que se indican en esta pagina se solucionaron, realmente muy muy eficiente!!!!! gracias

  2. Nước hoa Says:
    May 10th, 2010 at 2:40 am

    Install Avira Antivir and scan. sshnas21.dll will be removed

  3. jb Says:
    June 1st, 2010 at 1:05 pm

    Registry key:

    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | LosAlamos
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SSHNAS
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SSHNAS

    only found 1st key is registry in win7

  4. Francisco Says:
    June 16th, 2010 at 12:41 pm

    Yo tengo el ESET NOD32 y ya lo removió pero ahora cada vez que inicio seción me aparece una ventana que dice:

    There was a problem starting
    C: ……….AppData\Local\Temps\sshnas21.dll

    The specified module could not be found

  5. admin Says:
    June 17th, 2010 at 7:28 am

    Francisco, follow the instructions below to fix your trouble.
    http://www.myantispyware.com/2009/12/02/how-to-remove-sshnas-dll-trojan-remove-trojan-fakealert/

  6. XerXor Says:
    June 29th, 2010 at 3:57 am

    avira antivirus works! thx! try it if u have the same problem.

  7. Mich Says:
    August 31st, 2010 at 9:07 am

    This app is lounched at win boot, by an BXDVRS… app.
    Use TuneUP utilities or another program and stop the execution at startup.
    Cleanup with antivirus o delete files detected.

  8. Adriaan Says:
    September 6th, 2010 at 11:33 am

    Also found key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | Metropolis

  9. Behnam Says:
    September 8th, 2010 at 12:19 am

    I meet this problem 5 days ago and fix this problem via Avira Premium Security Suite 9…So, after this entered msconfig and from startup delete metropolis )))

  10. Jaffer Says:
    November 1st, 2010 at 7:08 pm

    Thanks many a times:)

Leave a Reply