Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I just noticed that I have an unknown item in my Startup in msconfig the command is

rundll32.exe C:\Windows\system32\sshnas21.dll,GetMainWnd

what is this?

share|improve this question
What makes you think it's linked to Halo 2? – Gnoupi Jun 23 '10 at 9:36
@Gnoupi that's just a way of saying stuff :), it never did made me think it linked to the game – Omu Jun 23 '10 at 9:46
up vote 5 down vote accepted

sshnas.dll or sshnas21.dll is a component of trojan FakeAlert. The trojan come from malicious websites that ask users to download an Adobe Flash Player update or player needed to view a movie online. The filename of the trojan is flash-HQ-plugin. Once started, the trojan will download and install core components: c.exe, msa.exe and sshnas.dll (sshnas21.dll). When downloaded, it will be configured to start automatically when Windows starts. Trojan FakeAlert may display many popups and fake security alerts, hijack Internet Explorer, disable Windows Task Manager and Registry editor.Also it is usually installed in conjunction with a rogue antispyware programs.

If your computer is infected, then use these removal instructions below, which will remove sshnas.dll (sshnas21.dll) trojan and other components of trojan FakeAlert for free.

Rest of article

More good advice

share|improve this answer
I have the sshnas21.dll in C:\Windows\SysWOW64 – Omu Jun 23 '10 at 9:49
better advice don't surf the net as admin! – user33788 Jun 23 '10 at 15:02

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.