Solved! Use SSHNAS21.DLL (Trojan FakeAV) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

SSHNAS21.DLL – Trojan FakeAV removal

FileMD5Virus Alias
SSHNAS21.DLL e370c1d6e9c60daf1062bc470eb1382d Trojan FakeAV
SSHNAS21.DLL e370c1d6e9c60daf1062bc470eb1382d Trojan Generic
SSHNAS21.DLL e370c1d6e9c60daf1062bc470eb1382d Trojan Eldorado
SSHNAS21.DLL e370c1d6e9c60daf1062bc470eb1382d Trojan Downloader
SSHNAS21.DLL e370c1d6e9c60daf1062bc470eb1382d Trojan Renos
SSHNAS21.DLL e370c1d6e9c60daf1062bc470eb1382d Trojan Vundo

SSHNAS21.DLL size: 257536 bytes
SSHNAS21.DLL hash: E370C1D6E9C60DAF1062BC470EB1382D

Created files:

%SysDir%\sshnas21.dll

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\SSHNAS\Type: 20000000
HKLM\System\CurrentControlSet\Services\SSHNAS\Start: 02000000
HKLM\System\CurrentControlSet\Services\SSHNAS\DisplayName: SSHNAS
HKLM\System\CurrentControlSet\Services\SSHNAS\ImagePath: %SystemRoot%\System32\svchost.exe -k netsvcs
HKLM\System\CurrentControlSet\Services\SSHNAS\Parameters\ServiceDll: 43003A005C00570049004E0044004F00570053005C00730079007300740065006D00330032005C007300730068006E0061007300320031002E0064006C006C000000

Detected by UnHackMe:

SSHNAS21.DLL
Default location: %SYSDIR%\SSHNAS21.DLL

Dropper information:
MD5: 020ede64ce242990e69da9d61773337b
File size: 389120 bytes

Leave a Reply