The files sshnas.dll and sshnas21.dll are part of a trojan that redirects search engine results in Google, Yahoo, and Bing searches. Both Firefox and Internet Explorer are affected. Here's how to manually remove the files associated with a sshnas.dll and sshnas21.dll trojan infection.
Difficulty: Easy
Time Required: 15 mins
Here's How:
Difficulty: Easy
Time Required: 15 mins
Here's How:
- Delete the service named SSHNAS. For steps to delete a service, refer to How to Delete a Windows Service.
- Select Start | Run and type %windir%
- Delete the following file:
msa.exe - Open the System32 subfolder and delete the following files:
sshnas.dll
sshnas21.dll - Click the back button to move back to the Windows folder (or select Start | Run and type %windir%).
- Open the Tasks subfolder and delete the following files:
{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job
{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job - Select Start | Run and type regedit to open the system registry. For help using the system registry, refer to the Windows System Registry Tutorial.
- Navigate to the following key:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
Note that HKCU is an abbreviation for HKEY_CURRENT_USER - Locate the value named SSHNAS. Right-click the value name and select delete.
- Exit the registry editor and reboot the system. If any "file cannot be found" errors occur during bootup, write down the name and locations of the missing files, then follow the steps outlined above to locate and delete those references. (For example, check Services for a corresponding service name and check the HKCU key noted above for a corresponding value name).
SHARE
