What is sshnas21.dll, How to remove sshnas21.dll

sshnas21.dll is a harmful program.

remove It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program.
If that does not help, then ask us for help in the Spyware removal forum.

Name: sshnas21
Filename: sshnas21.dll
Registry key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | LosAlamos
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | Canaveral
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SSHNAS
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SSHNAS

Command: C:\Windows\System32\sshnas21.dll
Startup Type: Service
HijackThis Category: O4
HijackThis Line:

O4 – HKCU\..\Run: [LosAlamos] rundll32.exe C:\Windows\system32\sshnas21.dll,DllWork
O4 – HKCU\..\Run: [Canaveral] rundll32.exe C:\Users\username\AppData\Local\Temp\sshnas21.dll,BackupReadW

Combofix/RSIT Line:

S2 SSHNAS;SSHNAS; C:\WINDOWS\system32\svchost.exe

Description: this is a new version of sshnas.dll trojan (trojan FakeAlert)

How to remove: use these sshnas.dll removal instructions.

10 thoughts on “What is sshnas21.dll, How to remove sshnas21.dll

  1. Vanessa R.

    Tenia problemas con los troyanos y al seguir los pasos que se indican en esta pagina se solucionaron, realmente muy muy eficiente!!!!! gracias

  2. jb

    Registry key:

    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | LosAlamos
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SSHNAS
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SSHNAS

    only found 1st key is registry in win7

  3. Francisco

    Yo tengo el ESET NOD32 y ya lo removió pero ahora cada vez que inicio seción me aparece una ventana que dice:

    There was a problem starting
    C: ……….AppData\Local\Temps\sshnas21.dll

    The specified module could not be found

  4. Mich

    This app is lounched at win boot, by an BXDVRS… app.
    Use TuneUP utilities or another program and stop the execution at startup.
    Cleanup with antivirus o delete files detected.

  5. Behnam

    I meet this problem 5 days ago and fix this problem via Avira Premium Security Suite 9…So, after this entered msconfig and from startup delete metropolis )))

Leave a Reply

Your email address will not be published. Required fields are marked *