When you start up your computer you are faced with the following error message.
Error loading C:\Windows\system32\sshnas21.dll. The specified module could not be found.
Warning: sshnas.dll is a harmful file, we recommend using a powerful malware removal tool to remove this threat.
Tested Adware & Spyware Free
sshnas.dll or sshnas21.dll is a component of trojan FakeAlert. The trojan come from malicious websites that ask visitors to download an Adobe Flash Player update or player required to view a movie online.
The filename of the trojan is flash-HQ-plugin. Once started, the trojan will download and install core components: c.exe, msa.exe and sshnas.dll (sshnas21.dll). After it successfully downloads, it will configure itself to start automatically on Windows start up.
Trojan FakeAlert may display many popups and fake security alerts, hijack Internet Explorer, disable Windows Task Manager and Registry editor.Also it is usually installed in conjunction with a rogue antispyware program.
If your computer is infected, you should use an antispyware program immediately to remove sshnas.dll (sshnas21.dll) trojan and other components of trojan FakeAlert.
File Details
Name: sshnas21
Filename: sshnas21.dll
Registry key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | LosAlamos
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | Canaveral
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SSHNAS
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SSHNAS
Command: C:\Windows\System32\sshnas21.dll
Startup Type: Service
O4 – HKCU\..\Run: [LosAlamos] rundll32.exe C:\Windows\system32\sshnas21.dll,DllWork
O4 – HKCU\..\Run: [Canaveral] rundll32.exe C:\Users\username\AppData\Local\Temp\sshnas21.dll,BackupReadW
S2 SSHNAS;SSHNAS; C:\WINDOWS\system32\svchost.exe
Description: this is a new version of sshnas.dll trojan (trojan FakeAlert)
sshnas.dll Aftermath and Error Loading sshnas.dll Message
If you are still receiving this error message after you have removed the Trojan, it is likely that your antivirus removed the malicious file, but did not remove the registry key which triggers the program during Windows start up.
This is a common problem often encountered when a malicious file is removed as they often write a command to the registry that tells Windows to load it on startup, but if the registry key which triggers it is not removed with the malicious file; Windows will still possess a command that tells it to run it, thus triggering a missing file error message.
To remove this error message you can open up the Registry Editor (type regedit in Run… and click Enter) and try to find the keys manually and delete any entries that corresponds with the information about registry keys located further up in this article.
Warning: Editing the registry is not for amateurs and may cause serious harm to your computer if a wrong key is accidentally deleted, for the safety of your computer we recommend that you use a dedicated registry cleaner to clean up the invalid keys.
Click here to download Reggenie and clean up your registry automatically.
Posted in 
