Do you have pop-ups or your computer infected with trojan or spyware ? Learn how to ask us for help, click here!

How to remove sshnas.dll or sshnas21.dll trojan (Remove trojan FakeAlert)

sshnas.dll or sshnas21.dll is a component of trojan FakeAlert. The trojan come from malicious websites that ask users to download an Adobe Flash Player update or player needed to view a movie online. The filename of the trojan is flash-HQ-plugin. Once started, the trojan will download and install core components: c.exe, msa.exe and sshnas.dll (sshnas21.dll). When downloaded, it will be configured to start automatically when Windows starts. Trojan FakeAlert may display many popups and fake security alerts, hijack Internet Explorer, disable Windows Task Manager and Registry editor.Also it is usually installed in conjunction with a rogue antispyware programs.

If your computer is infected, then use these removal instructions below, which will remove sshnas.dll (sshnas21.dll) trojan and other components of trojan FakeAlert for free.

Symptoms in a HijackThis Log

O4 – HKCU\..\Run: [Videohost] C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\c.exe
O4 – HKCU\..\Run: [SSHNAS] rundll32.exe C:\Windows\system32\sshnas.dll,DllWork
O4 – HKCU\..\Run: [LosAlamos] rundll32.exe C:\Windows\system32\sshnas.dll,AddConsoleAliasAW
O4 – HKCU\..\Run: [LosAlamos] rundll32.exe C:\Windows\system32\sshnas21.dll,AllocConsoleA
O4 – HKCU\..\Run: [Halo2] rundll32.exe C:\Users\username\AppData\Local\Temp\sshnas21.dll,GetMainWnd

Use the following instructions to remove sshnas.dll (sshnas21.dll) trojan and other components of trojan FakeAlert

Step 1.

Please download OTM by OldTimer from here and save it to desktop.

Run OTM. Copy, then paste the following text in “Paste Instructions for Items to be Moved” window (under the yellow bar):

:services
SSHNAS

:reg
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Videohost"=-
"SSHNAS"=-
"LosAlamos"=-
"Halo2"=-

:files
%windir%\msa.exe
%windir%\system32\sshnas.dll
%windir%\system32\sshnas21.dll
%windir%\Tasks\{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job
%windir%\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job

:Commands
[emptytemp]
[Reboot]

Click the red Moveit! button. When the tool is finished, it will produce a report for you. If you are asked to reboot the machine choose Yes.

Step 2.

Download MalwareBytes Anti-malware (MBAM). Once downloaded, close all programs and windows on your computer.

Double-click on the icon on your desktop named mbam-setup.exe. This will start the installation of MalwareBytes Anti-malware onto your computer. When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing, make sure a checkmark is placed next to “Update Malwarebytes’ Anti-Malware” and Launch “Malwarebytes’ Anti-Malware”. Then click Finish.

MalwareBytes Anti-malware will now automatically start and you will see a message stating that you should update the program before performing a scan. If an update is found, it will download and install the latest version.

As MalwareBytes Anti-malware will automatically update itself after the install, you can press the OK button to close that box and you will now be at the main menu. You will see window similar to the one below.

malwarebytes-antimalware1
Malwarebytes Anti-Malware Window

Make sure the “Perform quick scan” option is selected and then click on the Scan button to start scanning your computer. This procedure can take some time, so please be patient.

When the scan is finished a message box will appear that it has completed scanning successfully. Click OK. Now click “Show Results”. You will see a list of infected items similar as shown below.
Note: list of infected items may be different than what is shown in the image below.

sshnas remover
Malwarebytes Anti-malware, list of infected items

Make sure all entries have a checkmark at their far left and click “Remove Selected” button. MalwareBytes Anti-malware will now remove all of associated Trojan FakeAlert files and registry keys and add them to the programs’ quarantine. When MalwareBytes Anti-malware has finished removing the infection, a log will open in Notepad and you may be prompted to Restart.

Note: if you need help with the instructions, then post your questions in our Spyware Removal forum.

Trojan FakeAlert creates the following files and folders

C:\WINDOWS\Tasks\{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job
C:\WINDOWS\msa.exe
C:\WINDOWS\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
%UserProfile%\Local Settings\temp\a.exe
%UserProfile%\Local Settings\temp\b.exe
%UserProfile%\Local Settings\temp\c.exe
C:\WINDOWS\system32\sshnas.dll

Trojan FakeAlert creates the following registry keys and values

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SSHNAS
HKEY_CURRENT_USER\SOFTWARE\XML
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sshnas
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sshnas
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Handle
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\videohost
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\sshnas

Share and Enjoy:

  • Print
  • Digg
  • Sphinn
  • del.icio.us
  • Facebook
  • Mixx
  • Google Bookmarks
  • Slashdot
  • Twitter
December 2, 2009 on 5:45 am | In Trojan, Tutorials - HowTo | 355 Comments |


355 Comments »

RSS feed for comments on this post. TrackBack URI

  1. exelente ajuda, foi o unico site, dentre varios foruns que pesquisei por horas, que resouveu meu problema. objetivo e eficaz. parabens

    Comment by ricardo — December 3, 2009 #

  2. Wonderfull. Thaks a lot

    Comment by fjlc — December 3, 2009 #

  3. Done! :)
    Thank you very much for your help.

    Comment by okidoki — December 3, 2009 #

  4. This is an excellent tool. Cleaned and no fake alerts.
    Thank you very much.

    Comment by Rafael Vilchis — December 4, 2009 #

  5. Thanks for the help. In my case, NIS “stopped” part of the infection but i`ve got a pop-up saying something about “system32 can`t find sshnas.dll” or something like that. I just run malware bytes, as you said, and everything is gone away. Thanks again.

    Comment by charlie — December 4, 2009 #

  6. thank you so much man. as soon as i upgraded to windows 7 on monday i had this problem but now its completly gone.

    Comment by Daryl Williams — December 4, 2009 #

  7. thank you very much for your eforts

    Comment by osama omari — December 5, 2009 #

  8. This is the only thing that worked. Thanks!

    Comment by Mirjam — December 5, 2009 #

  9. Thank you so much for the help… I ran MBAM without using OTM and it did not take care of the problem… Running OTM then MBAM did take care of the problem. Thank you for these instructions, just wish people that create these things would find something better to do with their time.

    Comment by Kelli — December 5, 2009 #

  10. I ran the OTM and then clicked yes when prompted to re-boot my computer

    However, when it re-booted all i have now is a black screen with the mouse pointer

    what’s happened?? and how can i fic this, at least with a trojan i could use my computer.

    Comment by John — December 5, 2009 #

  11. SORRY for the last post, computer is back up and running and hopefully trojan free although it did say it could not lcate the sshnas.dll file but THANKS

    Comment by John — December 5, 2009 #

  12. John, try run Malwarebytes Anti-malware again and perform a full scan. If it does not help you, then ask for help in our Spyware removal forum.

    Comment by Patrik — December 5, 2009 #

  13. Thanks! it works!

    Comment by Chee — December 6, 2009 #

  14. Hi there!

    I followed the instructions and it seems to have worked. At least, afetr startup no files like a.exe or b.exe etc. are running. Anyhow my system is now saying that he can’t find the sshnas.dll file. I looked up for it in msconfig, but there is no entry. how can i avoid the message prompting me on startup or when I end Windows?

    Thanks!

    Comment by fabian — December 6, 2009 #

  15. Me again! After a FULL SCAN of Malwarebytes Anti-malware everything works fine again (like Patrik’s advice in the last post here). Thanks very much to that guy who wrote this article. YOU MADE MY DAY :)

    Comment by fabian — December 6, 2009 #

  16. Thanks dear it really worked

    Comment by Dr Bazel — December 7, 2009 #

  17. Thanks man this is great stuff!!!

    Comment by Nikola — December 7, 2009 #

  18. Thanks. That was great info.

    Comment by hatma — December 7, 2009 #

  19. Just a suggestion, include a warning that the [emptytemp] command for the OTM deletes anything in a temp directory, ANYWHERE. Had a temp directory in a subdirectory on my desktop and it cleared out about 300 MB of work… I tend to drop things into a temp directory while I’m actively working on them.

    Comment by Jason — December 7, 2009 #

  20. Jason, is not right idea – store important files in Temp folder.

    Comment by Patrik — December 8, 2009 #

  21. This works! It booted with no problems! No sshnas.dll issues! Thank you for your advice and spoon feeding this to the public like me who was just about to reformat the whole operating system!

    Comment by Mario — December 8, 2009 #

  22. You are a champion! Took forever, and multiple computers (because my downloading was knocked out by this .dll) and about 30 restarts in all thanks to this little bug crashing me with every 2nd task i tried to complete, BUT this saved my ass. Thank you so much :)

    Comment by AJ — December 9, 2009 #

  23. I was impressed with the instructions but still have the message

    “C:Users\XXX\AppData\Local\Temp\sshnas.dll
    Invalid access to memory location”

    at start up everytime. I removed a program I found but it still runs?

    What am I doing wrong? I thought I had really good protection with Symantec Endpoint and then followed all of your instructions.

    Comment by SJ Smith — December 9, 2009 #

  24. Thanks allot … it really worked out for me ..
    stress’s Gone Phew !
    hehe.. Thanks so much..

    Comment by Kainaat — December 10, 2009 #

  25. I’ve followed these steps and nothing hapened. My issue is still there. I have a black screen at boot and a error message at boot, saying sshnas.dll cannot be found. What can I do next? Please advise.
    Thanks.

    Comment by Catalin — December 10, 2009 #

  26. Excelente, MUCHAS GRACIAS.

    Fue necesario realizar los Pasos 1 y 2

    Comment by AHuesca — December 10, 2009 #

  27. SJ Smith, please open a new topic in our Spyware removal forum. I will help you.

    Comment by Patrik — December 11, 2009 #

  28. Catalin, if the instructions above does not help you, then ask for help in our Spyware removal forum.

    Comment by Patrik — December 11, 2009 #

  29. hi,
    when i run OTM it start deleting the temp files, but when it was going to finish suddely stop working and i had to close the program…. and my computer restart automaticaly…

    i dont know if it work..

    thanks

    Comment by lau — December 11, 2009 #

  30. super
    thanks

    Comment by miki — December 11, 2009 #

  31. GREAT ! Thank you very much for this help !

    Comment by rbisdabest — December 11, 2009 #

  32. can’t help removing the pop up on my desk even after i follow all trhe instruntion.

    Comment by jigs — December 11, 2009 #

  33. Thank you for your explanation, without your help would not have. Looked in many, but only here I found the desired solution.
    Grateful for the help.

    Comment by Célia — December 11, 2009 #

  34. served for windows 7?

    Comment by lalOo — December 12, 2009 #

  35. stil have the message
    “there was a problem starting c:\windows\system32\sshnas.dll
    the specified module could not be found.”

    Comment by paul ruiz — December 12, 2009 #

  36. Thank you Patrik see you in Spyware…

    Comment by SJ Smith — December 12, 2009 #

  37. Thank you. Very nice effort

    Comment by Steva — December 13, 2009 #

  38. it really works, thank´s man

    Comment by drake — December 13, 2009 #

  39. Really, really thanks you!
    The best!

    Comment by Caami — December 14, 2009 #

  40. Nice Tool, it found 7 threats and removed all for Vista SP2. Thanks..

    Comment by Maharsh — December 14, 2009 #

  41. Great! But i still get the message on startup that the dll file could not be located. How do I get rid of that?

    Comment by Md Khan — December 15, 2009 #

  42. Please make a new topic in the our Spyware removal forum. I will help you.

    Comment by Patrik — December 15, 2009 #

  43. Thank You!!!!!!!!!!!!!!!!!!!!

    Comment by Uros — December 15, 2009 #

  44. thanks you dude

    Comment by mathi — December 16, 2009 #

  45. Many thanks for that article. This is what the internet is for, people sharing good information. Sorted it all out…Thanks

    Comment by Richard B — December 16, 2009 #

  46. It’s so nice to find a real solution for this “fake alert” problem. Thanks…

    Comment by Sercan — December 17, 2009 #

  47. Thank YOU!!!

    Comment by Bojan — December 18, 2009 #

  48. Tried CCLEANER . Go to REGISTRY , ANALYZE , START CLEANING . Problem solved. Takes only a minute. Free to download from ccleaner.com/download

    Comment by Heinz — December 19, 2009 #

  49. SAVED MY DAY! THANK YOU VERY MUCH!

    Comment by tommy — December 19, 2009 #

  50. cheers

    Comment by nath — December 19, 2009 #

  51. All I can say is T H A N K Y O U S O M U C H !!!!

    This was perfect. I succesfully removed trojan

    Comment by Darko — December 19, 2009 #

  52. Thank you everything works correctly. The only problem is that shows me the text “Run.DLL cannot found C:\Windows\system32\sshnas.dll” when I restarts my computer. Anybody knows how to quit this message?

    Thank you for your advice.

    Comment by Sito — December 20, 2009 #

  53. Sito, ask for help in our Spyware removal forum. I will help you.

    Comment by Patrik — December 20, 2009 #

  54. I was wondering what the heck sshnas.dll was and why it was prompting me that it couldnt be found in the system 32folder!

    Used the instructions and got rid of the annoying startup prompt.

    Thanks so so so much!

    Comment by Peter — December 21, 2009 #

  55. Excelente!!!
    Funciona mesmo.
    Muito simples de usar, no meu caso tive que rodar no modo de segurança.
    Parabéns aos desenvolvedores deste fantástico recurso.

    Valeu!

    Comment by João Almeida — December 21, 2009 #

  56. i got the propblem “C:\windows\system32\sshnas.dll”. i use the step 1. after rebooting my computer go insane for a few sec. but after that, no more sshnas.dll problem and my are pc significantly faster. because the software no only fix the problem but also clean up the mess on my hard drive (aka temp files). i also recover almost 550mb free space. thank you very much!!!

    Comment by Ronny Philip — December 21, 2009 #

  57. WOW!!! Thank you!!!
    Now I know what site to trust :)

    Comment by Eric Lee — December 22, 2009 #

  58. thanks a lot
    now my system is free from sshnas.dll

    THANKS again

    Comment by S. K. jha — December 22, 2009 #

  59. Fantastic! This REALLY works. I couldn’t get Firefox or IE to start so I had to download the files to a thumb drive and copy them onto this machine. Works like champ. Thanks!!!!

    Comment by Big "El" — December 23, 2009 #

  60. Perfecto !!!. Muchas gracias por la ayuda, me ha sido de mucha utilidad.

    Gracias y un saludo

    Comment by Luigi — December 24, 2009 #

  61. tremendous, wonderful help; my pc is clean at this moment;
    such post or answers like this we need: short . concise and effective;
    Thanks a lot;
    Juan

    Comment by Juan De Cuba — December 24, 2009 #

  62. Thanks, and thanks again.
    The trojan was succesfully removed.

    Comment by Pedern — December 24, 2009 #

  63. Thanks man, this had been annoying after I was away for a weekend and let my brother use my computer.

    Been looking for awhile to get it solved. You’re the best :)

    Comment by Gin — December 25, 2009 #

  64. Great guide running the stuff atm, Before i used the OTM, MBAM only found 1 inffected file after i used it MBAM found 4 so i hope im clean, No clue why but if it works im happy and i was yust lucky i googled it after MBAM found it in the first place cause if i didnt i would still have does 3 other files hiding in there sorry for my messed up typing not really sure when to use , and . =P but thx for a great

    Comment by Marcus — December 26, 2009 #

  65. *edit* Guide

    Comment by Marcus — December 26, 2009 #

  66. Whoa! I was running windows7 and getting this error!
    But it worked! Thanks! You made my day!

    Comment by t7fu8 — December 26, 2009 #

  67. I was able to detect this trojan, but this guide helped me fully get rid of it. Thanks for your help!

    Comment by Malky — December 26, 2009 #

  68. Thanks a lot. ;)
    It really works.
    Good yob!

    Comment by NickNice — December 26, 2009 #

  69. Wow, who are you and why do you help us poor slobs that know squat about computers lol!! But in all honesty, thank you very much for a very clear solution to the problem. I think I got the trojan from trying to install the Adobe flash player form the popup I kept getting – which leads me to ask, when is it Ok to install software from messages like that? I’ve done software upgrades many times in the past with no problem.

    Comment by Barrie — December 26, 2009 #

  70. Excellent software works great, also had win 7 and got rid of the trojans no problem. Thanks for the guide.

    Comment by mendes — December 26, 2009 #

  71. Windows Defender detected and quarantined it, but obviously did not remove it. This worked a treat, thanks. Win7 64x for operating system.

    Comment by RoadWarrior — December 26, 2009 #

  72. I had Mccafee with me which did remove the dll, but could not remove the startup message. Thanks to this software for helping to remove all the oher spywares along with the startup message

    Comment by vinod — December 27, 2009 #

  73. thanks man you rule

    Comment by vasilis — December 27, 2009 #

  74. hey dude,
    it was fantastic. It really worked.
    tnx a lot

    Comment by mehrdad — December 27, 2009 #

  75. Thanks man!!!!

    Comment by kobe — December 29, 2009 #

  76. thanks!

    Comment by jonathan — December 29, 2009 #

  77. Patrik, Great Job, Thanks for your support.

    Comment by Tony Soto — December 29, 2009 #

  78. thanks a lot from italy!!!

    Comment by andrea — December 29, 2009 #

  79. it works on vista too, thanks very very much :)

    Comment by Andrej — December 29, 2009 #

  80. Thanks so much for the help! Norton found this but I still got the “can’t find sshnas.dll” message. Ran MBAM and not only did it fix this problem but found other “leftover” pieces of code that needed to be removed. THANKYOUSOMUCH!

    Comment by Kurious2no — December 29, 2009 #

  81. You are the best!!! you save my PC!!!

    Comment by john — December 29, 2009 #

  82. Thanks for posting this amazing useful tip!
    That trojan got very annoying…

    Comment by drgn — December 29, 2009 #

  83. You know…I really appreciate the help you provided. It’s benevolent people/orgs like yourself that contribute to humanity rather than screwing us.

    Thank you…

    Comment by brian O'Connell — December 29, 2009 #

  84. Que Deus te abençoe! =P (e amaldiçoe quem criou estes virus! xD)

    Comment by GoNGaXiNHuO — December 29, 2009 #

  85. Thanks from Germany to you,

    I followed step 1 + 2 with best result.

    after two hours with no result i have found your solution in the web. It was not easy to find, at first.
    many thanks. It solved the= “means” MY Problem too.

    Otherwise I had to restart the whole program.
    Your gift was a longer night. Muc better than a sleepless night with lost time.

    Comment by Georg — December 29, 2009 #

  86. Thanks so much!
    Easy to follow and worked out well :D
    So awesome!

    Comment by AMS — December 30, 2009 #

  87. What would the Internet be without guys like you.!
    Thanks for helping me out with this problem

    Comment by Bjarne — December 30, 2009 #

  88. Really works!
    Thanks a lot….

    Comment by mohamedimran — December 30, 2009 #

  89. great job cleared my problems first go thank you very much

    Comment by mark — December 30, 2009 #

  90. You fixed it, thanks a lot!

    Comment by Christian R — December 30, 2009 #

  91. Thanks so much, avg managed to pick up the sshnas.dll file but couldn’t find the others.

    Comment by Jason — December 30, 2009 #

  92. Thanks man, did great job keep up the good work.

    Comment by Ahmed — December 30, 2009 #

  93. great job thx

    Comment by leoš — December 30, 2009 #

  94. Everything fixed.
    Thank you so much! :D

    Comment by Robert K. — December 31, 2009 #

  95. Thanks very much for the tip, it was very brief and helpful.
    Happy new year!

    Comment by Jiji — December 31, 2009 #

  96. This software has done the job where AVG has failed./ THanks a lot!

    Comment by Rob — December 31, 2009 #

  97. Thanks so much!

    AVAST and Spybot SD didn’t pick this up.

    Comment by Scott — December 31, 2009 #

  98. Smart people like you help the rest of us,ty good job worked like a charm.

    Comment by tiberio — January 1, 2010 #

  99. genius! this took care of what other anti-virus/spyware/malware couldn’t. Keep it up!

    Comment by kon — January 1, 2010 #

  100. IT ACRUALLY WORKED!

    My problem was that after Norton successfully quarantined and removed sshnas.dll, upon rebooting I got the message window ” Error loading c:\windows\system32\sshnas.dll ”

    I thought I had somehow removed an important windows file so I called HP about what I thought was a Vista issue. They suggested I do a system recovery. I did that years ago and was going to use it as a last resort when after hours of google searching I came across Patrick’s post and followed his easy instructions, even for a non computer savy person such as myself

    Thank-you Patrick for taking the time to post this information, I no longer get that window when I start up.

    Cheers!

    Comment by Sherry B. — January 1, 2010 #

  101. Thank you very very much everything worked perfect!

    Comment by pantelis83 — January 2, 2010 #

  102. Perfect Job !!!

    Comment by Aris — January 2, 2010 #

  103. MUCH appreciated! The kids downloaded this baddie accidentally onto Dad’s work laptop! After finding this site, I was able to fix it up! Thank you sooooo much.

    Comment by happymom — January 3, 2010 #

  104. Okay so i tried this, when it asks me to reboot i have to manually do it from the tower. It will not do it from start power restart etc. Also i finally got maleware to work, but it locked up when it got to scanning this file i was trying to get rid of. What can i do now?

    Comment by Marcus Sherwood — January 3, 2010 #

  105. Thanks, works perfect!!

    Comment by Fredrik T. — January 5, 2010 #

  106. Gracias amigo, muy eficaz tu ayuda, GRACIASSS.

    Comment by Juan — January 5, 2010 #

  107. Thanks, This guide really did the job. My pc is finally free from those evil trojans.!!!!!

    Comment by Ziggy — January 7, 2010 #

  108. Muchas gracias, llevaba buscando una solución y POR FIN, perfect

    Comment by xarly — January 7, 2010 #

  109. Ran OTM which seemed to have some problems getting rid of it then rebooted as requested but now computer won’t restart – gets to Verifying DMI Pool Data in Boot up menu and won’t go any further. ANy suggestions? thanks

    Comment by Gerry — January 7, 2010 #

  110. LOL while it was posting this it finally moved on to Windows – took about 5 minutes. But the removal tool has worked – disappointed that AVIRA which I have a paid for, identifies it but doesn’t remove it. Thanks guys – appreciate your help

    Comment by Gerry — January 7, 2010 #

  111. wonderfull, thank you very much

    Comment by Nikolay — January 8, 2010 #

  112. Danke, Problem ist beseitigt.

    Comment by Pannass — January 9, 2010 #

  113. Wahey! It worked! Thank you so much :) Que bien es genial – muchos gracis!!!

    Comment by Shemmykins — January 10, 2010 #

  114. thank u so much! workrd like a charm! im completely computer like daaaaaaaaaaaahhhhhhhhhhhhh n got this 2 work..lool

    Comment by Jylo — January 10, 2010 #

  115. you can mention to reboot in safe mode and then in msconfig un check the malware checkbox and reboot again then do the abave works!

    Comment by Q — January 12, 2010 #

  116. I’ve allready done it earlier by my self. Thanks for your effort to the people

    Comment by mafakill — January 12, 2010 #

  117. Genius. Big Help! Thank you so much!

    Comment by Alwyn — January 13, 2010 #

  118. Thanks !! congrats on a job well done!

    Comment by BezZ — January 14, 2010 #

  119. thanks this worked great nice

    Comment by Phat power — January 15, 2010 #

  120. well thanks man it works.. ive already remove this headache spyware.. thanks a lot!! God bless..

    Comment by jhordan gijo — January 16, 2010 #

  121. Thanks a lot !

    One shot solution. You rock !

    Muito bom, resolveu na primeira tentativa.

    Comment by Jeki — January 16, 2010 #

  122. thank you very much u help me very very much i was nearly crakt thanks you are the best

    Comment by Jamal — January 20, 2010 #

  123. hey thanx for the post.. it rocks man!!!!!!!

    Comment by Manu — January 21, 2010 #

  124. damn.. good job minions…
    so cool…
    real works..

    ill buy for this… seeyah..

    Comment by gherd — January 21, 2010 #

  125. Does anyone have any other idea about removing this sshnas21.dll? I battle this motherf..ka since 3 days ago. I have tried OTM, FreeFixer, Avast, MalwareBytes, but nothing has the potential of actually removing this damn poison from my system. If anyone has any other idea about what can I do, please let me know. I think that I should reboot and change the reinstall the xp.

    Comment by Breathin — January 21, 2010 #

  126. It did not prompt me for reboot after i click on the moveit.. results did appear. but however, everything on my desktop is gone. i waited for like 10mins.. nothing happened. the OTM still remains at the result page. nth is moving.. hence i did a force reboot. after that, the error message of C:\windows\system32\sshnas.dll did not appear anymore. do i still need to run malware??

    Comment by dan — January 21, 2010 #

  127. Breathin, if the above instructions does not help you, then ask for help in our Spyware removal forum.

    Comment by Patrik — January 21, 2010 #

  128. dan, yes, run Malwarebytes anti-malware.

    Comment by Patrik — January 21, 2010 #

  129. wonderful work buddy.. thanks for this nice post.. i removed the hell from my PC.. thanks a lot…

    Comment by vikrant — January 28, 2010 #

  130. great!

    Search&destroy found only Win32.agent.ieu

    Avast, ESET ONLINE !!!! & misc other tools

    Zero – nothing! Null.

    and now 4 other trojans with your guidance

    thanx! good guy.

    Comment by Dreyzack — January 28, 2010 #

  131. works perfectly! thanks! this is most appreciated.

    Comment by olof — January 29, 2010 #

  132. Uff de maravilla…ordenador totalmente limpio..gracias por el esfuerzo de ustedes por ayudar a contra-restar todo este tipo de amenazas en la internet. Gracias de corazon.

    Comment by klein — January 29, 2010 #

  133. GOOD!
    thx
    i’m from brazil, thanks for help :D

    Comment by William — January 31, 2010 #

  134. you are the best man!great job…thanks a lot

    Comment by kostas — January 31, 2010 #

  135. Thank you dude…more power!

    Comment by insomnia — January 31, 2010 #

  136. Thank you so much! At first I couldn’t open any webreader at all but when it finally worked I found this and when I simply followed the steps the compute was back to normal.

    Comment by Theo — February 2, 2010 #

  137. Worked well with Windows 7, the tool found 6 malwares. Thanks a lot! Greetings from Latvia!

    Comment by Martins — February 2, 2010 #

  138. Thanks, dude.

    Comment by Rekord1980 — February 3, 2010 #

  139. Absolutely amazing! It caught not only the sshnas21.dll fake alert but 8 others as well.

    I’ve saved this link…

    Great job.

    /SparrowHawk

    Comment by SparrowHawk — February 3, 2010 #

  140. EXCELLENT!! It really works!!
    Dam I wish I had done this earlier.
    I Downloaded all these other system registry fixer applicationns for which were supposed to be free but were not, always a catch.
    Need more people in the world like you Patrik
    Champion!!!!

    Comment by Dazza — February 3, 2010 #

  141. Tnx! Great work!

    Comment by p — February 3, 2010 #

  142. Thank u sooooo much dude.
    Thank u!
    Thank u!!
    Thank u!!!

    Comment by stef — February 3, 2010 #

  143. It works fine my computer is fresh again! Thank you very much!

    Comment by wess — February 4, 2010 #

  144. im using windows 7 64bit and the guide is 100% works fine Thx ^_^

    Comment by Welhim — February 5, 2010 #

  145. THANK YOU VEEEEEEEEEEEEEEEEEERRRRRRRRRRRRYYYYYYYYYY MUCH!!!!!!!
    IT HELPED ME ALOT SINCE IT HAD ME BOTHERED FOR DAYS. :D

    Comment by uking — February 6, 2010 #

  146. Thanks a lot. Worked as described!

    Comment by MikeD — February 7, 2010 #

  147. lol and im glad there are people like u. lifesavior! that little sshnas.dll popup was doing my freaking head in.

    Comment by zen — February 7, 2010 #

  148. Thanks a million for this one!

    I was going nuts with this malware-crap and then I found your tutorial which erased it from my computer with ease..

    Much appreciated! Thanks once again, you helped me keep my computer alive yet a few more days..

    Comment by Martin Johansson — February 7, 2010 #

  149. good good good good…..
    it’s work
    thank you!!!!!!!!!!!!!!!!!!!!!!!!!!!

    Comment by moety_flash — February 7, 2010 #

  150. thank you very much…
    i used OTM and it cleaned smoothly…
    5 star….

    Comment by marshal — February 8, 2010 #

  151. Thanks a lot .

    Comment by Tananya557 — February 8, 2010 #

  152. Thanks so much.
    It’s work for me.
    *-*

    Can save my laptop, right now.

    Comment by Jang — February 9, 2010 #

  153. thank you, very very very much,

    Comment by carlos — February 9, 2010 #

  154. Thanx bro….It work with window 7..
    Again,thanx alot… :)

    Comment by SetMyIp — February 10, 2010 #

  155. Thanks man,
    Its work

    Comment by Raviram — February 11, 2010 #

  156. I would like to thank all of you very very much. Your instructions made it easy to get rid of this bastard. Your site will be my first port of call shouls I get infected again.
    Alphabet

    Comment by Alphabet — February 11, 2010 #

  157. Gracias!!!!

    Comment by info — February 13, 2010 #

  158. Muchas gracias. Funcionó tal y como lo describieron. They are now in quarantine!!! Gracias

    Comment by Oscar Garcia — February 13, 2010 #

  159. Gracias, funcionó muy bien. Creo que lo compraré para tener el programa al completo.
    Thanks, it worked pretty well. I think I am going to buy it in order to get the full version.

    Comment by Julio — February 14, 2010 #

  160. Thanks mate. MS AV didn’t even detect anything

    Comment by Psykie — February 14, 2010 #

  161. n1.
    Thanks mate!!!

    Comment by reky043 — February 15, 2010 #

  162. Hi

    Thanks for all the advice in this column. I had the trojan for several weeks. I ignored the on screen message because I did not understand it. Computer nearly died at the week so decided to investigate. Did a scan with McAfee which missed it completely. I downloaded The SuperAntiSpyware free edition – found the trojan but left the on screen start up message. Thanks Heinz for reminding me about CC Cleaner -installed this and hey presto its gone and my computer is as good as new.

    Comment by Faith Fulcher — February 16, 2010 #

  163. I just had this virus McAfee found it and I searched the name in the system32 map, He told me to run my task manager and kill RunDLL file off the proces, ( not don’t kill the one runned by system only kill the one who has your username behind it ) So after I’ve done that I deleted it from system32 map.
    Hope this helps!
    It worked for me!

    Comment by Kevin — February 16, 2010 #

  164. Ohk people who all still getting this message after deleting it
    ” Error loading c:\windows\system32\sshnas.dll , The specified module could not be found ”

    all you have to do is start – run – msconfig – startup – [ you will find something as laslagas run32.dll ….just uncheck it and it will be gone from your next restart njoyy !!! SORRY 4 BAD ENGLISH

    Comment by Dinesh — February 19, 2010 #

  165. thanks allot……..

    Comment by pradeep — February 19, 2010 #

  166. Luv You Long time

    Comment by JustinwB — February 19, 2010 #

  167. Excelente. Funciono de Maravilla.
    Gracias…….!!!!!

    Comment by MToledo — February 19, 2010 #

  168. thank you so much. this really is the only thing working. i know you get this alot but thanks

    Comment by caleb — February 19, 2010 #

  169. Worked for me first time!! (Win7, 32bit) – Searched many websites and threads for good solution – this seems to be the simplest and most effective. Super support, thanks for saving me hours of further searching!

    Comment by Steve — February 20, 2010 #

  170. dear
    thank you sooo much..it helped me alot..

    Comment by mevan — February 20, 2010 #

  171. Thanks a lotttttttttttt
    Was facing the same problem just a few days after I bought a new laptop wid win7.
    OTM solved the problem
    Thanks a ton

    Comment by eaa — February 20, 2010 #

  172. thank you very much xddddd. Very good job.

    Comment by harkoon — February 21, 2010 #

  173. Thank you Patrik! It all workt great! Just one thing though, when scan was over I couldn’t find my Prog.files, windows files and the software file! Where did they go?! Please help me.

    Comment by Lisa — February 21, 2010 #

  174. Tenia problemas con los troyanos y al seguir los pasos que se indican en esta pagina se solucionaron, realmente muy muy eficiente!!!!! gracias

    Comment by Vanessa R. — February 21, 2010 #

  175. this works

    i ran superantispyware, then trojan remover then malwarebytes and its all gone :)

    Comment by nick — February 21, 2010 #

  176. Lisa, what are files you can`t found ?
    All files in Program files, Windows folders ?

    Comment by Patrik — February 22, 2010 #

  177. Thanx for replying Patrik. No, luckily I found them!
    They where moved after scanning the system, because I had them in non visual modem(?). I don’t know why. Anyhow, I restored them. Thank you!

    Comment by Lisa — February 22, 2010 #

  178. Really wonderfull explanation! I thought I was a smart surfer but as the filehog I am I unwittingly got stuck with this little monster. This removal sollution was wonderfull and I am happy I found it before some serious damage could be done.

    Thankyou so much, a real lifesaver that anyone can manage!

    Comment by Marcus — February 23, 2010 #

  179. It works. Thank you very very much!!!!

    Comment by Norbert Cseh — February 23, 2010 #

  180. Well done Old Timer ! Simply the best !

    Comment by fong — February 23, 2010 #

  181. well done ! OTM you are simply the best

    Comment by fong — February 23, 2010 #

  182. thanks alot man!!! worked perfectly!

    Comment by Kevin — February 23, 2010 #

  183. Awesome man, It worked perfectly fine. I used OTM.exe. I have a question here. Can i use this OTM.exe to cleanup my temp files and other unwanted stuff every week. What the command? Can you help me?

    Comment by Gopal — February 25, 2010 #

  184. Gopal, to clean your temp files use ATF Cleaner by Atribune – good, free and small tool. Download it from here.

    Comment by Patrik — February 26, 2010 #

  185. Really You are Great!!! My comp is working now!
    Many good things to YOU! Thank`s a LOT for your KINDNESS and TIME dedicate for us!!!!!

    Good day from Italy!

    Comment by Alis M — February 26, 2010 #

  186. Thank you, you saved me!

    Comment by Domenico — February 28, 2010 #

  187. Cheers thanks alot for taking the time and effort to help us out… Great work.

    Comment by Mark — February 28, 2010 #

  188. Worked perfectly!! Thank you VERY much!!!

    Comment by kozak — February 28, 2010 #

  189. Worked perfectly. Thank you VERY much!!!

    Comment by kozak — February 28, 2010 #

  190. Excellent. It worked perfectly. Thanks you very much.I had been using more than 2 antivirus softwares but none of them could solve that problem. thank again

    Comment by Thomas — March 1, 2010 #

  191. thank u very much it really works

    Comment by Hitesh — March 3, 2010 #

  192. this works very well, thank you !!

    Comment by Josephine — March 4, 2010 #

  193. Thanks alot,
    worked

    Comment by ollie — March 4, 2010 #

  194. Thanks! Got rid of that problem! Seems I have more though :( Is there any good program out there anymore for stopping these things?? I have used Norton, AVG, and Avira but keep ending up with these trojans. I update and scan religiously. I also scan regularly with Spybot, Malwarebytes, and AdAware and all missed this….and periodically wit CCleaner…why is it Malwarebytes needs Old Timer to be run first in order to detect the issues? Just trying to understand and keep it from happening again.

    Comment by Kelly — March 5, 2010 #

  195. Bonjour, hola ,
    Meric beaucoup pour votre aide. Tout est claire et efficace. Bonne continuation.

    Comment by lebebfrance — March 5, 2010 #

  196. Bedankt, werkt klasse….

    Thnx, works great….

    Comment by Hans — March 5, 2010 #

  197. Kelly, at moment of writing the instructions above, Malwarebytes could not completely remove this infections.

    Comment by Patrik — March 6, 2010 #

  198. Thank you a lot.I had the message for more then a half of year.Your instructions fix my computer.
    Good job

    Comment by George — March 6, 2010 #

  199. Thank you very much. I followed your instructions and that solved my problem.
    :)

    Comment by mixlane — March 8, 2010 #

  200. Thanks dude it really worked

    Comment by Chris K. — March 8, 2010 #

  201. Thank~ Really Work For Me~

    Comment by MrTRanCeEviL — March 12, 2010 #

  202. Fantastico !!!! realmente funciona muchas gracias se ha resuelto el problema en mi Vista he seguido los 2 pasos y holahop! PERFECTO!

    Comment by hector — March 12, 2010 #

  203. Thank you. That would be very helpful..

    Comment by salsabel — March 12, 2010 #

  204. phew, a solution!!! Superb!! Many Thanks OTM!!

    Comment by Rmc — March 13, 2010 #

  205. Thanks, thanks, thanks

    Comment by Ali — March 13, 2010 #

  206. MUCHAS GRACIAS
    SUPERÉ MIS DESCONFIANZAS Y TEMOERES PARA SEGUIR LAS INSTRUCCIONES, PERO FUNCIONÓ Y SE ELIMINÓ EL VIRUS. REINTERANDOLES MI AGRADECIMIENTO QUEDO DE USTED(ES, MUCHAS GRACIAS

    Comment by COOPSA — March 15, 2010 #

  207. thanks a lot

    Comment by gabriele — March 15, 2010 #

  208. thank you soo much! it worked!!

    Comment by Nunu — March 17, 2010 #

  209. Thank you so much!!! You saved me a lot o ftime and nerves…. Thank you

    Comment by Dima — March 18, 2010 #

  210. It works. And not only removed the trojans and malicious programs but all of the pop outs too.You guys are great. I’ll add you to my favorites rigth now. By the way, I know exacly where i got the trojan that gave me so much trouble. Is there a way that i can tell on them so they can screw the sons of bitches..?

    Comment by Robinson senett — March 18, 2010 #

  211. thank you so much.. it worked.. thanks again

    Comment by emrah — March 19, 2010 #

  212. Thanks a lot!!!!!!!
    It’s the best solution i’ve found. It work perfectly, very helpful

    Comment by Alexandra — March 19, 2010 #

  213. it’s work! thanks!

    Comment by kikii — March 20, 2010 #

  214. Nah, just forget all that above. You don´t need to install any program at all. Just:

    1.Manually delete the registry keys above. (run, regedit)
    2.Manually delete all the files listed on the explanation.
    3.Run msinfo and check if there are any unknown process being still loaded.

    Simple and fast!

    Comment by Harravaril — March 22, 2010 #

  215. it is ok that i dont install the malware???BUT I INSTALL the otm??pls answer quick

    Comment by pogi — March 23, 2010 #

  216. Thanks dude it really worked!!!

    Comment by Walter Baar — March 23, 2010 #

  217. pogi, OTM will remove only core component of the trojans. To remove any associated malware you need you a good antispyware (Malwarebytes, SuperAntispyware, etc).

    Comment by Patrik — March 24, 2010 #

  218. It WORKED!!! Thanks a LOT!!!

    Comment by Jim — March 24, 2010 #

  219. Thank so much bro! works perfectly!

    Comment by mike — March 24, 2010 #

  220. Thanks for your help! you are your most countries;)

    Comment by cus — March 25, 2010 #

  221. can i delete the log notepad after the scanned?

    Comment by flamex — March 25, 2010 #

  222. Yes, of course :)

    Comment by Patrik — March 25, 2010 #

  223. Thank you so much…muchas gracias…arigato…you
    saved my PC

    Comment by Pch — March 26, 2010 #

  224. This one is great stuff, IE8 works after removing this trojan!! Thank you!

    Comment by Alice — March 26, 2010 #

  225. thanks for the information. it really helped me a lot.

    Comment by Santosh — March 27, 2010 #

  226. thanks a lot. all work has benn done and it works! really great explanation.

    Comment by d-loader — March 29, 2010 #

  227. Me quito el problema, Gracias excelente. salvo mi PC.

    Comment by Oscarj — March 29, 2010 #

  228. Worked like a dream. ESET picked up the virus but couldn’t remove the .dll file because it was in use. I tried killing the process, stopping unknown services and then eventually using unlocker to unlock the file to delete it, but it wouldn’t work. This tutorial was excellent and worked beautifully. Thanks.

    Comment by Estorium — March 31, 2010 #

  229. Increible… muchas gracias por la informacion, me ayudaron a remover el problema. Muchas Gracias

    Comment by peibul — March 31, 2010 #

  230. Thanks from Israel!

    Comment by Matan Cohen — April 1, 2010 #

  231. use Control Panel-Folder option-wiew-check hidden files and folders

    unchek hide protected operating sistem files

    aplly

    download HijackThis free.antivirus.com/hijackthis/

    instal

    close all program

    scan with HijacThis and check sshnas.dll and fixit.

    ENJOY………….

    Comment by maxsoft — April 2, 2010 #

  232. Thanks a lot it worked for me too.

    Comment by Fica Petru — April 3, 2010 #

  233. My laptop is infected with sshnas21 trojan. I used OTM and Malwarebytes. sshnas21 together with 14 other trojans removed. Thank you very much for the fix.. :)

    Comment by Von Kurei — April 3, 2010 #

  234. I have Avira Premium Security Suit. It has detect and wiped out this malicious software but did not remove annoying message about sshnas.dll at my Windows 7 start-up log-on.

    So thank you ;) !

    Comment by Zak — April 4, 2010 #

  235. Start-search-msconfig-startup-check sshnas.dll and disable

    Enjoy………

    Comment by maxsoft — April 5, 2010 #

  236. thanks alot, this was gr8..
    (smillllleeeessssss)

    Comment by trojanhorse..captured — April 6, 2010 #

  237. funktioniert wirklich DAnke !

    Comment by mo — April 6, 2010 #

  238. thank you very very much

    Comment by hayko — April 6, 2010 #

  239. Thanks a lot. It works well!

    Comment by js — April 6, 2010 #

  240. This was very helpful. Thank you very much !

    Comment by Octavian — April 8, 2010 #

  241. I got no fake alert now, but still, when I run hijack now, the thing is still there and causing my comp to run slow… even though I aint getting any fake alerts

    Comment by Nilsi — April 9, 2010 #

  242. Nilsi, if you need a help, please start a new topic in our Spyware removal forum.

    Comment by Patrik — April 9, 2010 #

  243. sembra che abbia funzionato! solo che quando apro internet Explorer mi dice sempre errore..e mi si chiude sempre la pagina! non capisco perchè..eppure non ci sono più file infetti..perfavore attendo una risposta.GRAZIE!

    Comment by simo92vittoria — April 9, 2010 #

  244. Thank you.

    Comment by Chawalit — April 10, 2010 #

  245. Thanks a lot, it worked for me.

    Comment by Divas — April 10, 2010 #

  246. Hell Yeah. It worked!. Thank you so much

    Comment by Kjeldsen — April 11, 2010 #

  247. Ow damn thanks:D

    Comment by Gianni — April 12, 2010 #

  248. THANKS A LOT!!!!!! THIS WORKS!! GRACIAS!!!! AMAZING!! THANK YOU!! AND MY COMPUTER IT´S FASTER LIKE THE FIRST DAY… :D

    Comment by paulina — April 12, 2010 #

  249. I’m from korea
    It’s very wonderful!!!
    Thank you so much

    Comment by cheety — April 12, 2010 #

  250. woooowwww… its works!!!
    and my win 7 more faster before than,
    i’m from indonesia
    thanks a million!

    Comment by adien — April 13, 2010 #

  251. Great, Thank You very much You are #1. Now my Laptop with Windows 7 work Perfect…It fix all the problem… Thank You Again

    Comment by Victor — April 14, 2010 #

  252. Thank you very much! It worked!

    Comment by Jose Perez — April 15, 2010 #

  253. Thanks! The tutorial is very easy and helped me to remove the trojan in 10 minutes.

    Great site!

    Comment by Stephanie — April 17, 2010 #

  254. you saved me .and i learned new tricks today! thanks !

    Comment by Lawllet — April 17, 2010 #

  255. You have been very helpful thankx allot :)

    Comment by yannis — April 19, 2010 #

  256. Just amazing! Wow! Thank you so much! Kind regards, Gordon Mitchell

    Comment by Gordon Mitchell — April 22, 2010 #

  257. terimakasih (thank you)

    Comment by emhacho — April 22, 2010 #

  258. Thanks a lot, just got this sort of virus on my PC. First got a warning that sshnas.dll was not found and that was weird. Later it opened IE and published ads. Done this and seems good:)

    Comment by Stefan — April 22, 2010 #

  259. You have been very helpful thank you .

    Comment by Sam — April 24, 2010 #

  260. Thank you so much….I was having visions of having to reformat my Drive, but you have saved the day. your instructions and help were perfect and now my computer is also perfect again and it only took 15 minutes tops. your a genius…Thanks again.

    Comment by Roy — April 28, 2010 #

  261. I was a bit frightend when OTM cleaned my desktop and wondered whether after restart computer Win7 would ever start, but evething worked well and trojans have gone. :) Thanks a lot!

    Comment by Gustav — April 29, 2010 #

  262. excelente, meu pc não abria os icones e depois de utilizar as dicas otm …voltou a funcionar…valeu thanks

    Comment by pneto — April 29, 2010 #

  263. Thanks! This really worked :)

    Comment by H3gzi — April 30, 2010 #

  264. oh thank so much for your lesson, and i have try it all and it is really work it, so if you dont mind i will write down what you’ve been given this into my blog and of course in my language so you can help other colleagues to solve the same problem.

    Comment by dhanuhp — May 1, 2010 #

  265. Thanks alot for your help, followed the guide and my error is gone!!! 10/10 :)

    Comment by heroes — May 2, 2010 #

  266. thanks a lot man! I was desperate to find a file destroyer to really execute it. Thanks a lot! :)

    Comment by Me — May 3, 2010 #

  267. Awesome :D thanks a lot fixed me virus ;)

    Comment by X — May 4, 2010 #

  268. Thank you, oh thank you for this solution!
    I just run OTM but nothing happened, so i run Malwarebytes’ Anti-Malware and that stupid virus GONE! Thanks for this great help!
    (Sorry for my bad english!)

    Comment by Chevy — May 5, 2010 #

  269. That’s really work!!
    Thanks a lot!

    Comment by Jin — May 5, 2010 #

  270. WoW it worked thanks guys great work keep it up!

    Comment by yoeri — May 6, 2010 #

  271. Thank you guys. It worked like a charm :D

    Alex from Romania

    Comment by alex — May 6, 2010 #

  272. It’s work!!! Thanks a lot for the useful info….!!!

    Comment by Nora — May 7, 2010 #

  273. Great help thanks, this problem made my IE8 stop working, now it’s solved

    Comment by Mike — May 10, 2010 #

  274. every time i visite this site i love it more & more

    Comment by Ahmed — May 13, 2010 #

  275. if a pop up comes saying can’t run sshnas.dll do the following:
    1. goto run and type regedit
    2.FOLLOW this : HK current user>SOFTWARE>microsoft>windows>current version>run
    3. in the name column you’ll find SSHNAS just delete it and the next time u start the computer pooof! it’s gone yay!

    Comment by childrenofbodom — May 17, 2010 #

  276. Work Great :) Thanks a lot the issue is resolved

    Comment by vipil — May 20, 2010 #

  277. this what expercied, I runed malware program in full scan but with no result. I restart the PC, and entered safe mode by pressing on F8. I run full scan and discovered 5 trojan.

    So, use safe mode..

    Comment by MSO — May 22, 2010 #

  278. thank you very much sir. a very detailed tutorial.GODBLESS

    Comment by karma — May 27, 2010 #

  279. Hi, Patrik!!!!

    Thx sooooo much!!!! you really saved my life!!!
    really! no words to describe how much you helped me!!!!!!
    thx, thx thx!!

    Comment by Rayza — May 29, 2010 #

  280. I would like to say Thank you VERY VERY much for this very important and life saving piece of information. I am forever indebted to you for saving my day. Thank you. Thank you. Thank you.
    God bless

    Comment by Shane — June 3, 2010 #

  281. A simple but very effective procedure.
    Congratulations and 1000x thanks!

    Comment by Stef — June 6, 2010 #

  282. Thank you very much!!!! It was really helpful. God bless you. :D

    Comment by Adrienne — June 7, 2010 #

  283. thanks! it really works :)

    Comment by adie — June 7, 2010 #

  284. Thanks

    Comment by emodrone — June 8, 2010 #

  285. Thank You,

    Really very good.

    Congratulations!

    Comment by Bernardo — June 8, 2010 #

  286. Great,thanks a lot,work fine!!!!

    Comment by carlos — June 8, 2010 #

  287. thnx..it works great…thnx agin

    Comment by Tlk_nala — June 9, 2010 #

  288. correction;thnx,it works great..anyway thank you so much……..

    Comment by Tlk_nala — June 10, 2010 #

  289. Thanks a lot! You helped me!

    Köszönöm!

    Comment by Ivan — June 10, 2010 #

  290. hi. nice post it helped me a lot, although my anti virus blocked it, it wasnt able to remove it. so thanks alot great job

    Comment by andrew — June 10, 2010 #

  291. many thank you very much

    Comment by Mitchel — June 10, 2010 #

  292. Thanks a lot! My PC and particularly the NAS-drives run as fast as before the infection! Glad I found your information on the dll on the internet.
    Take care,

    Olav

    Comment by Olav — June 11, 2010 #

  293. It worked for me as well. First I was suspicious as I got warning when downloading OTM that this was an unsafe download, but after downloading and running it removed sshnas21.dll. After that I also ran Malwarebytes, which also removed some trojan trash.

    Never thought it would work this quick and this well.

    Thanks a lot guys from the NL!

    Comment by Elmar — June 11, 2010 #

  294. HI, im trying to remove my sshnas21.dll error..after running the OTM the report said that sshnas.dll was not found…why is that so? do i have to change

    :services
    SSHNAS

    into..

    :services
    SSHNAS21

    or just let it be and continue to step 2 and use malware bytes??

    help me plz..!!

    Comment by Julirose — June 16, 2010 #

  295. Julirose, please begin a new topic in our Spyware removal forum. I will help you.

    Comment by Patrik — June 16, 2010 #

  296. hey its me again..help plz..!

    i already did everything on the instructions, i even tried to perform a full scan but still i keep getting the sshnas21.dll error during startup, what should i do? i really appreciate some help plz..tnx!

    Comment by Julirose — June 16, 2010 #

  297. @patrik ok tnx! ill do that :D

    Comment by Julirose — June 16, 2010 #

  298. hey!! it’s really worked!! thanks a lot!

    Comment by sra.Bates — June 18, 2010 #

  299. Thank you very much!!!!

    Comment by Gever — June 20, 2010 #

  300. Thanks a lot for the tool guys, I followed the instructions and it removed the fake alerts, for me it said: C/System32/Shnass21.dll can not be found. After using the tool it removed everyting. I have no error messages. Again. Thanks a lot!

    Comment by f1NZ — June 20, 2010 #

  301. Thank you. Very nice effort

    Comment by Polash — June 21, 2010 #

  302. Thank you very much. very helpful.

    Comment by syahirien — June 23, 2010 #

  303. I LOVE YOU GUYS! YOU SAVED ME FROM REFORMATTING… AGAIN!.

    Comment by cha — June 28, 2010 #

  304. hi….thanks so much…

    Comment by imah91 — June 28, 2010 #

  305. thanks from albania :)

    Comment by Olsi Hoxha — June 30, 2010 #

  306. this tutor and program very usefull.. thanks

    Comment by bajo — July 1, 2010 #

  307. Tank u so much
    in persian we say :
    خیلی مردی، دمت گرم

    Comment by javadi — July 3, 2010 #

  308. when ever i run the malwarebytes C:\WINDOWS\Tasks\{8C3FDD81-7AE0-4605-A46A-2488B179F2A3}.job (Trojan.Downloader) -> Quarantined and deleted successfully. and HKEY_CURRENT_USER\SOFTWARE\XML (Trojan.FakeAlert) -> Quarantined and deleted successfully alway r infected each time i delete those file its always there right after i restart the computer no matter how much i use the malwarebytes those files are always there

    Comment by linda — July 4, 2010 #

  309. linda, probably your PC infected with a hidden trojan that reinstall it. Please open a new topic in our Spyware removal forum. I will check your PC.

    Comment by Patrik — July 4, 2010 #

  310. i dowloaded malwarebite’s anti-malware, but there are 2 runtime errors: ’0′ and ’440′. i got another anti-malware program, but i still get the error that sshnas21.dll can’t found. my pc is going nuts after some minutes!! HELP PLZ!!!

    Comment by jeroen — July 4, 2010 #

  311. I cant down load malwarebytes or anything else that navagates away from your site. I ran the Hijackthis scan but I cant post the log anywhere to see which ones are bad because I cant access the internet. what should I do?

    Comment by losinit — July 4, 2010 #

  312. Im on a different comp now trying to find a way around av security suite. I was able to download hijackthis and run the scan but thats as far as Ive got.

    Comment by losinit — July 4, 2010 #

  313. jeroen, please follow the steps below:
    Open notepad, copy/paste the text in the code box below into notepad:

    regsvr32 "C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll"
    regsvr32 "C:\Program Files\Malwarebytes' Anti-Malware\ssubtmr6.dll"
    regsvr32 "C:\Program Files\Malwarebytes' Anti-Malware\vbalsgrid6.ocx"

    Where “C” in the above text is your system disk name.
    Save this as fix.bat to your Desktop. Remember to select Save as file type: All files in Notepad.
    Double Click fix.bat.
    Reboot your PC and try run Malwarebytes once again.

    Comment by Patrik — July 4, 2010 #

  314. losinit, you have tried the steps.

    Comment by Patrik — July 4, 2010 #

  315. thnx patrik, it works now

    Comment by jeroen — July 5, 2010 #

  316. thanks for the great help. the iritating trojans are now long gone may you continue to update this site to help more people…

    Comment by marianne — July 5, 2010 #

  317. thanks dude!

    Comment by philippines — July 7, 2010 #

  318. bro thanks it help allot… ur the best.

    Comment by jb — July 8, 2010 #

  319. hey guys, it really works!! thank you very much for saving my very annoying day.! thanx again and more power to you!!!

    Comment by Saint from phil. — July 12, 2010 #

  320. you are a genius!great it really works!hope to help more..thanks

    Comment by albert meadow — July 19, 2010 #

  321. This solution works! Thank you for your help. :)

    Comment by Leen — July 22, 2010 #

  322. thanks so much!

    Comment by deepak — July 22, 2010 #

  323. great!! it worked! so nice of u man!

    Comment by bikash — July 26, 2010 #

  324. Awesome man it worked and now my PC is fine no Trojans relly thanks BRO ….

    Comment by LEGEND — July 27, 2010 #

  325. Also thanks from me!

    Comment by Joop — July 31, 2010 #

  326. it help a lot..thanks..

    Comment by Roxanne Joy Patag — August 12, 2010 #

  327. I removed it using Malware, it said i had to reboot for it to fully remove some files, and now my computer is crashed.. -.-

    all i get is the following message:

    “Reboot and select proper boot device or insert boot media in selected boot device and press a key”

    help?

    Comment by Kj0diz — August 13, 2010 #

  328. Thank you very much!
    Now everything is finally back to normal.:D

    Comment by Matti — August 14, 2010 #

  329. Kj0diz, looks like MBR secion of hard disk is damaged. You need use recovery console to repair it.

    Comment by Patrik — August 14, 2010 #

  330. Very useful tip!

    Comment by akira — August 15, 2010 #

  331. It`s really work…awesome
    This post in amazing…nice tips.
    Thank you

    Comment by andrau — August 15, 2010 #

  332. Very good indeed, at last solved the issue!! after hours and hours searching in other forums.
    Thanks a lot!!

    Comment by Diego Seben — August 17, 2010 #

  333. Hey,

    I’ve gotten a sshnas virus on my comp, but the OTA ain’t finding it. I believe it got some other names in it. Hijack is saying this:

    O4 – HKCU\..\Run: [Metropolis] rundll32.exe C:\Windows\system32\sshnas21.dll,GetHandle

    What do I need to write in the commanderfield in the OTA to make it find the virus?

    Comment by Tims — August 18, 2010 #

  334. Hi, wow it was very useful, thx a lot.
    GOOD JOB.

    Comment by Rene — August 19, 2010 #

  335. thanks very much for your help, whatever i said i have to say thank you a lot, i had so many problems before but now everything is great,i’m from Egypt,,,

    Comment by Mohmaed — August 19, 2010 #

  336. thanks a lot! it worked on my pc! great job guys! thanks!

    Comment by chazzter — August 21, 2010 #

  337. hmm, can i delete the ‘stuffs’ in the quarantine section? i’ve finished the scan and my problems are fixed. can i?

    Comment by chazzter — August 21, 2010 #

  338. Tims, looks like your PC is infected with a new version of this malware.
    Run HijackThis and fix the line
    O4 – HKCU\..\Run: [Metropolis] rundll32.exe C:\Windows\system32\sshnas21.dll,GetHandle, then run OTM and Malwarebytes.

    Comment by Patrik — August 22, 2010 #

  339. MBAM_ERROR_ADD_TO_RESULTS (0,6)

    Comment by clau — August 23, 2010 #

  340. hi,guys,thx a lot,
    i want ask can i delete all of quarantine?

    Comment by clau — August 23, 2010 #

  341. clau, yes, you can remove all of quarantine.

    Comment by Patrik — August 23, 2010 #

  342. sry,then how about the error?
    MBAM_ERROR_ADD_TO_RESULTS (0,6)

    Comment by clau — August 24, 2010 #

  343. great job dude

    Comment by ayok — August 25, 2010 #

  344. I tried step 1 and the sshnas21.dll alert message stopped. I keep getting the message “Windows explorer has stopped working”. I tried the step 2 (Malwarebytes software) and deleted 3 files. Windows explorer keep crashing again and again!!!

    Unfortunately I can’t update the Anti-malware software because I can’t login to the internet. Can I login to the internet on another PC, and transfer the update of Maswarebytes via a memory flashcard?

    Thank you in advance!
    Panos

    Comment by Panos — August 25, 2010 #

  345. SOLUTION OF THE WINDOWS EXPLORER CRASHING problem

    (1) For the step 2 in this tutorial, you can use portable update of Malwarebytes: In this page
    http://www.windowsbbs.com/general-security/75953-portable-antimalware-programs.html you can see many antispyware software that can be installed and updated in a PC with internet connection and then you just copy-paste the installed folder in a USB memory stick and use it on another PC with no internet connection. I did this with Malwarebytes.

    (2) Windows vista 7 – do windows restore!!! It does NOT erase data files. I used it today, and restored the system as it was five days before. Problem solved! Just go to the start button and in the search field write “windows restore”.

    Comment by Panos — August 26, 2010 #

  346. clau, try reinstall Malwarebytes.

    Comment by Patrik — August 27, 2010 #

  347. Panos, yes you can use a flash card/disk to transfer a Malwarebytes update.

    Comment by Patrik — August 27, 2010 #

  348. i try already.but still remain same.and the trojan agent i cant to remove.

    Comment by clau — August 27, 2010 #

  349. thank you so much man. as soon as i upgraded to windows 7 on monday i had this problem but now its completly gone. Thank u so much.

    Comment by Sadegh — August 28, 2010 #

  350. clau, start a new topic in our Spyware removal forum. I will check your PC.

    Comment by Patrik — August 28, 2010 #

  351. Thank you so much, worked perfectly with my Japanese OS.

    Comment by Mike — August 30, 2010 #

  352. God!! youre a life saver! i mean pc saver!

    Comment by Renz — August 31, 2010 #

  353. Works perfect. Thanks for the post

    Comment by Mladen — September 4, 2010 #

  354. Thank you very much. The software was excellent and by following your steps I found over 200 infected files on my powerful computer.
    Finally I can start to enjoy a computer I have paid a lot for. Virus sucks ass.
    Thanks for making the world a lot better!

    Comment by T H A N K YOU — September 5, 2010 #

  355. my window defender succesfully remove it..im using window vista

    Comment by din — September 7, 2010 #

Leave a comment

XHTML: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>


My Anti Spyware - Free antispyware programs and Spyware Removal Instructions.