What is sshnas21.dll, How to remove sshnas21.dll

sshnas21.dll is a harmful program.

remove It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program.
If that does not help, then ask us for help in the Spyware removal forum.

Name: sshnas21
Filename: sshnas21.dll
Registry key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | LosAlamos
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | Canaveral

Command: C:\Windows\System32\sshnas21.dll
Startup Type: Service
HijackThis Category: O4
HijackThis Line:

O4 – HKCU\..\Run: [LosAlamos] rundll32.exe C:\Windows\system32\sshnas21.dll,DllWork
O4 – HKCU\..\Run: [Canaveral] rundll32.exe C:\Users\username\AppData\Local\Temp\sshnas21.dll,BackupReadW

Combofix/RSIT Line:

S2 SSHNAS;SSHNAS; C:\WINDOWS\system32\svchost.exe

Description: this is a new version of sshnas.dll trojan (trojan FakeAlert)

How to remove: use these sshnas.dll removal instructions.

10 Responses to “What is sshnas21.dll, How to remove sshnas21.dll”

  1. Vanessa R. Says:

    Tenia problemas con los troyanos y al seguir los pasos que se indican en esta pagina se solucionaron, realmente muy muy eficiente!!!!! gracias

  2. Nước hoa Says:

    Install Avira Antivir and scan. sshnas21.dll will be removed

  3. jb Says:

    Registry key:

    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | LosAlamos

    only found 1st key is registry in win7

  4. Francisco Says:

    Yo tengo el ESET NOD32 y ya lo removió pero ahora cada vez que inicio seción me aparece una ventana que dice:

    There was a problem starting
    C: ……….AppData\Local\Temps\sshnas21.dll

    The specified module could not be found

  5. admin Says:

    Francisco, follow the instructions below to fix your trouble.

  6. XerXor Says:

    avira antivirus works! thx! try it if u have the same problem.

  7. Mich Says:

    This app is lounched at win boot, by an BXDVRS… app.
    Use TuneUP utilities or another program and stop the execution at startup.
    Cleanup with antivirus o delete files detected.

  8. Adriaan Says:

    Also found key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | Metropolis

  9. Behnam Says:

    I meet this problem 5 days ago and fix this problem via Avira Premium Security Suite 9…So, after this entered msconfig and from startup delete metropolis )))

  10. Jaffer Says:

    Thanks many a times:)

Leave a Reply