What is sshnas.dll?

sshnas.dll is usually located in the 'c:\WINDOWS\system32\' folder.

If you have additional information about the file, please share it with the FreeFixer users by posting a comment at the bottom of this page.

Vendor and version information [?]

sshnas.dll does not have any version or vendor information.

Digital signatures [?]

sshnas.dll is not signed.

Hashes [?]

PropertyValue
MD5164666832fb7f9dfbded398d5a3dfe50
SHA25673415af130d6b4db1bd1fba45ba194a49875dddd40c820afb07e233e5e16121a

What will you do with sshnas.dll?

To help other users, please let us know what you will do with sshnas.dll:



What did other users do?

The poll result listed below shows what users chose to do with sshnas.dll. 50% have voted for removal. Based on votes from 1616 users.

User vote results: There were 811 votes to remove and 805 votes to keep

NOTE: Please do not use this poll as the only source of input to determine what you will do with sshnas.dll.

Malware or legitimate?

If you feel that you need more information to determine if your should keep this file or remove it, please read this guide.

Please select the option that best describe your thoughts on the information provided on this web page


Free online surveys

And now some shameless self promotion ;)

A screenshot of FreeFixer's scan result.Hi, my name is Roger Karlsson. I've been running this website since 2006. I want to let you know about the FreeFixer program. FreeFixer is a freeware tool that analyzes your system and let you manually identify unwanted programs. Once you've identified some malware files, FreeFixer is pretty good at removing them. You can download FreeFixer here. It runs on Windows 2000/XP/2003/2008/2016/2019/Vista/7/8/8.1/10. Supports both 32- and 64-bit Windows.

If you have questions, feedback on FreeFixer or the freefixer.com website, need help analyzing FreeFixer's scan result or just want to say hello, please contact me. You can find my email address at the contact page.

Comments

Please share with the other users what you think about this file. What does this file do? Is it legitimate or something that your computer is better without? Do you know how it was installed on your system? Did you install it yourself or did it come bundled with some other software? Is it running smoothly or do you get some error message? Any information that will help to document this file is welcome. Thank you for your contributions.

I'm reading all new comments so don't hesitate to post a question about the file. If I don't have the answer perhaps another user can help you.

Roger Karlsson writes

3 thumbs

sshnas.dll is malware and was installed on my system after running a faked Flash Player upgrade.

sshnas.dll is started every time a user logs on to the infected system, by adding the following command:

"rundll32.exe C:\Windows\system32\sshnas.dll,DllWork"

under

"HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SSHNAS"

in the Windows Registry.

During the infection of my system, the following error messages also appeared, related to sshnas.dll:

"RUNDLL
Error loading C:\WINDOWS\system32\sshnas.dll
Invalid access to memory location."

"RUNDLL
Error loading C:\DOCUME~1\roger\LOCALS~1\Temp\\sshnas.dll
The specified module could not be found."

If you got sshnas.dll on your system I recommend removing it as soon as possible. I deleted it with FreeFixer.

How to remove sshnas.dll with Freefixer:
1. Download and install FreeFixer: http://www.freefixer.com/download.html
2. Start FreeFixer and click "Scan".
3. In the Scan result, locate items which mention sshnas.dll, and check its "Delete" checkbox. sshnas.dll usually appears under "Registry startups" and/or "Recently created or modified files" in FreeFixer's scan result. DO NOT check anything else for removal, unless you are 100% sure it's malware.
4. Click "Fix".
5. Restart your machine.
6. Start FreeFixer scan your computer again.
7. Verify that sshnas.dll no longer appear anywhere in the scan result.

Did this solve your sshnas.dll malware problem?

Here's the scan result from virus total which shows that sshnas.dll is detected by some anti-virus programs:
http://www.virustotal.com/analisis/73415af130d6b4db1bd1fba45ba194a49875dddd40c820afb07e233e5e16121a-1259137686

# 25 Nov 2009, 0:32

paul v.gerven writes

-1 thumb

sshnas.dll was installed on my vista desktop in the same way you describe.
I deleted the file. then I scanned the hdd with avg free 9.0 but it didn't find anything. I cleaned the registry with piriform ccleaner v2.25. I still get lots of pop-up screens by ms internet explorer. whatever it is, it's still there.

# 27 Nov 2009, 2:53

sporderman writes

0 thumbs

My computer is infected by sshnas.dll
I would like to remove
Error loading C:\WINDOWS\system32\sshnas.dll
Invalid access to memory location."
Help me please

# 27 Nov 2009, 6:02

paul v.gerven writes

2 thumbs

I removed the trojan by downloading malwarebytes' anti-malware (mbam-setup.exe) and by letting it scan and remove the infection.
(my anti-virusscanner avg free 9.0 was able to detect, but not to remove the infection).
succes !
paul

# 27 Nov 2009, 8:33

Phil writes

-1 thumb

I downloaded Malwarebytes anti-malware in safemode with networking and ran it. It removed the file but it keeps coming back every 10mins. I downloaded the freefixer mentioned above but its not valid for windows vista 64bit apparently. Please help!

# 28 Nov 2009, 8:18

==ryan== writes

-1 thumb

wow. i never realised. but the message was doing my head in so i decided to see if it was important or not by searching on the web.

thanks!!!

# 30 Nov 2009, 9:05

==ryan== writes

0 thumbs

hi. soz for the double post. ive deleted it from my C deive but will it still afect me?

# 30 Nov 2009, 9:16

Vinodh Kumar writes

-1 thumb

Hi,
sshnas.dll, Virus can be deleted by Avast Anitivirus, as i did it in mine,hope it works with you too..

# 30 Nov 2009, 17:07

Roger Karlsson writes

0 thumbs

sshnas.dll is pretty good at escaping detection. I've scanned a new variant of sshnas.dll and only 3 of the 41 anti-virus scanners detected it at the time of writing:

http://www.virustotal.com/analisis/bec21449eb0c358cd5e23896c940d70b619433af9239ee392b025fd126e92b5a-1259683488

# 1 Dec 2009, 8:11

dan writes

1 thumb

Hey evrybody i did what it said abaut the sshnas.dll, And guess what it worked, and allso my computer started to work faster. Tank you and to the people who leave their comments on here!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

# 3 Dec 2009, 10:17

Mirjam writes

0 thumbs

Also got a lot of pop-ups and redirects. Spybot, McAfee etc. didn't detect anything. But this worked (see below):

www.myantispyware.com/2009/12/02/how-to-remove-sshnas-dll-trojan-remove-trojan-fakealert/

# 5 Dec 2009, 10:21

kenny187 writes

0 thumbs

if you cant delete with anti-virus software, try to delete it manualy, then delete if from your recycle bin then do this...

go to "run" type in "regedit" (windows registry editor) and go to "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. right click on "sshnas.exe" and delete. it worked for me and it stopped all pop-ups and such.. hope this helps..

# 8 Dec 2009, 2:37

Hello ! writes

-1 thumb

...Yup ...just follow the method ...and dude it works !


Thanks !
Bye ...

# 8 Dec 2009, 9:30

martial writes

1 thumb

..all i can say is 'merci beaucoup' i am beginner with pc's

and this freefixer just saved me a lot of worries....

# 9 Dec 2009, 10:44

mattheoh writes

0 thumbs

"go to "run" type in "regedit" (windows registry editor) and go to "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. right click on "sshnas.exe" and delete. "

worked also for me !
Thanks a lot.

# 11 Dec 2009, 2:09

mem writes

-1 thumb

I followed the Mirjam's instructions and It works !
Thanks a lot

# 16 Dec 2009, 2:58

Sensex writes

-1 thumb

Hi can anyone suggest the best anti-virus prog I should buy... cause my bluetooth mouse is also not working and I think its because of the dll malware

# 16 Dec 2009, 10:19

Heinz writes

-1 thumb

I tried CCLEANER , a free program (it´s mandatory on my computers). Clicked on REGISTY, ANALYZE and START CLEANING. And: problem solved ! Think, it´s the simpliest way to get rid of the ssnhas.dll entry.

# 19 Dec 2009, 5:53

Rachel E writes

0 thumbs

Hey on mattheoh's method once i get to "run" i get the name as losalamos and the data as rundll32.exe C:\windows\system32\sshnas.dll,nvtaskbarinit. Is this the one i delete?

# 22 Dec 2009, 14:26

Rachel E writes

-1 thumb

Hey sorry for double post but i finally managed to get onto the internet and am just using the freefixer method instead :) Thanks for people that have posted here youve been a lot of help.

# 23 Dec 2009, 4:16

archijs writes

-1 thumb

AVG found that virus and removed it! :)

# 29 Dec 2009, 14:20

Scotty G writes

-1 thumb

MATTHEOH Above is Correct, but there are TWO, not one occurances in your registery. Do as per below.

"go to "run" type in "regedit" (windows registry editor) and go to "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. right click on "sshnas.exe" and delete. "

THEN
"go to "run" type in "regedit" (windows registry editor) and go to "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. right click on "sshnas.exe" and delete. "

That should stop it from reproducing.

# 29 Dec 2009, 16:13

mamuka writes

0 thumbs

I had same problem on my LAPTOP C:\WINDOWS\system32\sshnas.dll was appearing every time I started the laptop, I downloaded Freefixer and installed, WOW it really works, and it is so easy, many thanks

# 2 Jan 2010, 12:58

Art Vandalay writes

-1 thumb

I followed these prompts:

"go to "run" type in "regedit" (windows registry editor) and go to "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. right click on "sshnas.exe" and delete. "

However, there is no sshnas.exe in the list. But I am definitely getting the error box everytime I log on. Any other options I have?

# 9 Jan 2010, 11:49

coolsniper writes

2 thumbs

Had the same problem. Managed to get rid of this trash in this way (I have Win7):
1. Go to "Start", then "Run" - type in "msconfig", click OK.
2. Once the System Configuration Window opens - go to submenu "startup" (in my particular case among other items listed there I saw one definitely very strange - called "Los Alamos", manufacturer details - unknown). Deselect/Remove the tick in front of this item and press ok.
3. Reboot the machine and start-up in Safe Mode with Networking.
4. Once Logged in (you must be under Admin Account or have administrative rights) - go to C/Windows/System32 - find "sshnas.dll" and delete it.
5.Finally, also go to "Run" type in "regedit" (windows registry editor) and go to "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. If you see any lines with anything of the following mentioned: "Los Alamos", "jkk.exe", "jkl.exe" or "sshnas" - delete the lines and close the registry editor.

Hope this might help. Important - if you are not a skilled/advanced user it might be better to opt for "Free Fixer" mentioned above or a similar program.

P.S.: there's no ideal antivirus existing - Windows Defender kept popping up every 10 minutes with the threat detection message - however pressing the "clean system" button was of no use and resulting in another pop-up 10 minutes later. I also have KIS2010 (Kaspersky Internet Security) running on my PC with the latest definitions updates at the moment - it failed to detect the threat even during the full scan of the system. So had to google a bit and remove the threat manually))). (Having wasted a couple of hours though)

# 30 Jan 2010, 18:29

Vista 64 BITS writes

-1 thumb

Hi,
You call it : sshnas.dll, my pc names it:
sshnas21.dll
Also, these files belong to this version:
sshnas21.dll
Fph.exe
Rundll32.exe
Faisqua.exe
Delete these files (not Rundll32.exe, you need to fix that...) and virus is gone!
Try contacting Microsoft for support on Rundll32.exe...

# 2 Apr 2010, 10:11

Leave a reply