Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: C:\windows\system32\sshnas21.dll  (Read 27442 times)

0 Members and 1 Guest are viewing this topic.

PuB_Evo

    Topic Starter


    Rookie

    • Experience: Beginner
    • OS: Windows 7
    Re: C:\windows\system32\sshnas21.dll
    « Reply #15 on: October 27, 2010, 05:32:10 AM »
    "Adobe AIR" = Adobe AIR
    "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
    "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
    "Adobe_55230b0b70661df0f212e88f0b655f7" = Adobe Creative Suite 4 Design Premium
    "AIM_7" = AIM 7
    "AirRivals_EN_is1" = AirRivals_EN 1.0.0.35
    "avast!" = avast! Antivirus
    "Call of Duty Modern Warfare 2_is1" = Call of Duty Modern Warfare 2
    "CANONIJPLM100" = Inkjet Printer/Scanner Extended Survey Program
    "CanonSolutionMenu" = Canon Utilities Solution Menu
    "CCleaner" = CCleaner
    "Celtx (2.7)" = Celtx (2.7)
    "com.adobe.amp.4875E02D9FB21EE389F73B8D1 702B320485DF8CE.1" = Adobe Media Player
    "com.adobe.mauby.4875E02D9FB21EE389F73B8 D1702B320485DF8CE.1" = Acrobat.com
    "DVD Decrypter" = DVD Decrypter (Remove Only)
    "Emerald Viewer" = Emerald Viewer
    "ENTERPRISE" = Microsoft Office Enterprise 2007
    "EVEREST Ultimate Edition_is1" = EVEREST Ultimate Edition v5.30
    "Free iPod Video Converter_is1" = Free iPod Video Converter 1.34
    "Garena" = Garena 2010
    "InstallShield_{08F173A8-AB81-4760-AEB0-CE91F3B05AEF}" = Transformers(TM) - Revenge of the Fallen(TM)
    "InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = LG Power Tools
    "InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = LG CyberLink Power2Go
    "InstallShield_{7F0B94C6-828C-4EDE-A86B-ECF4D792B68D}" = X-Men Origins - Wolverine(TM)
    "Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
    "mIRC" = mIRC
    "Mozilla Firefox (3.6.10)" = Mozilla Firefox (3.6.10)
    "MP Navigator EX 1.2" = Canon MP Navigator EX 1.2
    "OCCT_is1" = OCCT Perestroika 3.0.0
    "OpenAL" = OpenAL
    "PowerISO" = PowerISO
    "PunkBusterSvc" = PunkBuster Services
    "QvodPlayer" = QvodPlayer(QVOD) v3.5
    "SecondLife" = SecondLife (remove only)
    "SoftwareUpdUtility" = Download Updater (AOL LLC)
    "Steam App 12840" = DiRT 2
    "TeamViewer 5" = TeamViewer 5
    "uTorrent" = µTorrent
    "VLC media player" = VLC media player 1.0.3
    "VMware_Workstation" = VMware Workstation
    "Warcraft III" = Warcraft III
    "WinLiveSuite_Wave3" = Windows Live Essentials
     
    ========== HKEY_CURRENT_USER Uninstall List ==========
     
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
    "Warcraft III" = Warcraft III: All Products
     
    ========== Last 10 Event Log Errors ==========
     
    [ Antivirus Events ]
    Error - 20-Oct-10 11:06:55 PM | Computer Name = User-PC | Source = avast! | ID = 33554522
    Description = Error in aswChestS: chest s_NewFile Error 112. 
     
    Error - 20-Oct-10 11:06:55 PM | Computer Name = User-PC | Source = avast! | ID = 33554522
    Description = Error in aswChestC: chestAddFile Error 112. 
     
    Error - 20-Oct-10 11:07:10 PM | Computer Name = User-PC | Source = avast! | ID = 33554522
    Description = Error in aswChestS: chest s_NewFile Error 112. 
     
    Error - 20-Oct-10 11:07:10 PM | Computer Name = User-PC | Source = avast! | ID = 33554522
    Description = Error in aswChestC: chestAddFile Error 112. 
     
    Error - 20-Oct-10 11:45:05 PM | Computer Name = User-PC | Source = avast! | ID = 33554522
    Description = Error in aswChestS: chest s_NewFile Error 112. 
     
    Error - 20-Oct-10 11:45:05 PM | Computer Name = User-PC | Source = avast! | ID = 33554522
    Description = Error in aswChestC: chestAddFile Error 112. 

    PuB_Evo

      Topic Starter


      Rookie

      • Experience: Beginner
      • OS: Windows 7
      Re: C:\windows\system32\sshnas21.dll
      « Reply #16 on: October 27, 2010, 05:32:52 AM »
      [ Application Events ]
      Error - 21-Oct-10 1:47:50 PM | Computer Name = User-PC | Source = SideBySide | ID = 16842832
      Description = Activation context generation failed for "C:\Program Files (x86)\Adobe\Acrobat
       9.0\Designer 8.2\FormDesigner.exe".Error in manifest or policy file "" on line
      .  A component version required by the application conflicts with another component
       version already active.  Conflicting components are:.  Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest.
      Component
       2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifest.
       
      Error - 21-Oct-10 5:15:04 PM | Computer Name = User-PC | Source = Application Error | ID = 1000
      Description = Faulting application name: SUPERAntiSpyware.exe, version: 4.44.0.1000,
       time stamp: 0x4ca390d3  Faulting module name: SUPERAntiSpyware.exe, version: 4.44.0.1000,
       time stamp: 0x4ca390d3  Exception code: 0xc0000005  Fault offset: 0x0006de68  Faulting
       process id: 0xe0c  Faulting application start time: 0x01cb7164fc1ea720  Faulting application
       path: C:\Users\User\Downloads\SUPERAntiSpyware.exe  Faulting module path: C:\Users\User\Downloads\SUPERAntiSpyware.exe
      Report
       Id: 45653e96-dd58-11df-b24d-005056c00008
       
      Error - 22-Oct-10 5:32:15 PM | Computer Name = User-PC | Source = Application Hang | ID = 1002
      Description = The program vmplayer.exe version 7.0.0.9911 stopped interacting with
       Windows and was closed. To see if more information about the problem is available,
       check the problem history in the Action Center control panel.    Process ID: b04    Start
       Time: 01cb72308230859d    Termination Time: 2    Application Path: C:\Program Files (x86)\VMware\VMware
       Workstation\vmplayer.exe    Report Id: cfda87a8-de23-11df-83c9-005056c00008 
       
      Error - 23-Oct-10 11:24:32 AM | Computer Name = User-PC | Source = SideBySide | ID = 16842815
      Description = Activation context generation failed for "c:\Program Files (x86)\Common
       Files\Adobe AIR\Versions\1.0\Adobe AIR.dll".Error in manifest or policy file "c:\Program
       Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll" on line 3.  The value
       "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBE R_MAJOR.BUILD_NUMBER_MINOR" of attribute
       "version" in element "assemblyIdentity" is invalid.
       
      Error - 23-Oct-10 11:25:33 AM | Computer Name = User-PC | Source = SideBySide | ID = 16842832
      Description = Activation context generation failed for "C:\Program Files (x86)\Adobe\Acrobat
       9.0\Designer 8.2\FormDesigner.exe".Error in manifest or policy file "" on line
      .  A component version required by the application conflicts with another component
       version already active.  Conflicting components are:.  Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest.
      Component
       2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifest.
       
      Error - 23-Oct-10 2:15:31 PM | Computer Name = User-PC | Source = SideBySide | ID = 16842832
      Description = Activation context generation failed for "C:\Program Files (x86)\Adobe\Acrobat
       9.0\Designer 8.2\FormDesigner.exe".Error in manifest or policy file "" on line
      .  A component version required by the application conflicts with another component
       version already active.  Conflicting components are:.  Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest.
      Component
       2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifest.
       
      Error - 23-Oct-10 2:15:31 PM | Computer Name = User-PC | Source = SideBySide | ID = 16842832
      Description = Activation context generation failed for "C:\Program Files (x86)\Adobe\Acrobat
       9.0\Designer 8.2\FormDesigner.exe".Error in manifest or policy file "" on line
      .  A component version required by the application conflicts with another component
       version already active.  Conflicting components are:.  Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest.
      Component
       2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifest.
       
      Error - 26-Oct-10 9:06:59 AM | Computer Name = User-PC | Source = SideBySide | ID = 16842815
      Description = Activation context generation failed for "c:\Program Files (x86)\Common
       Files\Adobe AIR\Versions\1.0\Adobe AIR.dll".Error in manifest or policy file "c:\Program
       Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll" on line 3.  The value
       "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBE R_MAJOR.BUILD_NUMBER_MINOR" of attribute
       "version" in element "assemblyIdentity" is invalid.
       
      Error - 26-Oct-10 5:53:58 PM | Computer Name = User-PC | Source = SideBySide | ID = 16842815
      Description = Activation context generation failed for "c:\Program Files (x86)\Common
       Files\Adobe AIR\Versions\1.0\Adobe AIR.dll".Error in manifest or policy file "c:\Program
       Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll" on line 3.  The value
       "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBE R_MAJOR.BUILD_NUMBER_MINOR" of attribute
       "version" in element "assemblyIdentity" is invalid.
       
      Error - 26-Oct-10 5:54:56 PM | Computer Name = User-PC | Source = SideBySide | ID = 16842832
      Description = Activation context generation failed for "C:\Program Files (x86)\Adobe\Acrobat
       9.0\Designer 8.2\FormDesigner.exe".Error in manifest or policy file "" on line
      .  A component version required by the application conflicts with another component
       version already active.  Conflicting components are:.  Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest.
      Component
       2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifest.

      PuB_Evo

        Topic Starter


        Rookie

        • Experience: Beginner
        • OS: Windows 7
        Re: C:\windows\system32\sshnas21.dll
        « Reply #17 on: October 27, 2010, 05:34:00 AM »
        [ System Events ]
        Error - 02-Aug-10 12:01:15 PM | Computer Name = User-PC | Source = Disk | ID = 262155
        Description = The driver detected a controller error on \Device\Harddisk2\DR2.
         
        Error - 02-Aug-10 3:01:24 PM | Computer Name = User-PC | Source = Service Control Manager | ID = 7009
        Description = A timeout was reached (30000 milliseconds) while waiting for the Windows
         Search service to connect.
         
        Error - 02-Aug-10 3:01:24 PM | Computer Name = User-PC | Source = Service Control Manager | ID = 7000
        Description = The Windows Search service failed to start due to the following error:
           %%1053
         
        Error - 02-Aug-10 3:03:06 PM | Computer Name = User-PC | Source = Service Control Manager | ID = 7009
        Description = A timeout was reached (30000 milliseconds) while waiting for the Windows
         Search service to connect.
         
        Error - 02-Aug-10 3:03:06 PM | Computer Name = User-PC | Source = Service Control Manager | ID = 7000
        Description = The Windows Search service failed to start due to the following error:
           %%1053
         
        Error - 03-Aug-10 1:40:12 PM | Computer Name = User-PC | Source = Disk | ID = 262155
        Description = The driver detected a controller error on \Device\Harddisk2\DR2.
         
        Error - 03-Aug-10 1:40:13 PM | Computer Name = User-PC | Source = Disk | ID = 262155
        Description = The driver detected a controller error on \Device\Harddisk2\DR2.
         
        Error - 03-Aug-10 1:40:13 PM | Computer Name = User-PC | Source = Disk | ID = 262155
        Description = The driver detected a controller error on \Device\Harddisk2\DR2.
         
        Error - 07-Aug-10 10:33:12 AM | Computer Name = User-PC | Source = Disk | ID = 262155
        Description = The driver detected a controller error on \Device\Harddisk2\DR2.
         
        Error - 07-Aug-10 10:33:13 AM | Computer Name = User-PC | Source = Disk | ID = 262155
        Description = The driver detected a controller error on \Device\Harddisk2\DR2.
         
         
        < End of report >

        SuperDave

        • Malware Removal Specialist
        • Moderator


        • Genius
        • Thanked: 1020
        • Certifications: List
        • Experience: Expert
        • OS: Windows 10
        Re: C:\windows\system32\sshnas21.dll
        « Reply #18 on: October 27, 2010, 12:40:34 PM »
        Please go to Jotti's malware scan
        (If more than one file needs scanned they must be done separately and links posted for each one)

        * Copy the file path in the below Code box:

        Code: [Select]
        C:\Windows\DAODx.exe
         

        * At the upload site, click once inside the window next to Browse.
        * Press Ctrl+V on the keyboard (both at the same time) to paste the file path into the window.
        * Next click Submit file
        * Your file will possibly be entered into a queue which normally takes less than a minute to clear.
        * This will perform a scan across multiple different virus scanning engines.
        * Important: Wait for all of the scanning engines to complete.
        * Once the scan is finished, Copy and then Paste the link in the address bar into your next reply.

        *****************************************
        Clean out your temporary internet files and temp files.

        Download TFC by OldTimer to your desktop.

        Double-click TFC.exe to run it.

        Note: If you are running on Vista, right-click on the file and choose Run As Administrator

        TFC will close all programs when run, so make sure you have saved all your work before you begin.

        * Click the Start button to begin the cleaning process.
        * Depending on how often you clean temp files, execution time should be anywhere from a few seconds to a minute or two.
        * Please let TFC run uninterrupted until it is finished.

        Once TFC is finished it should restart your computer. If it does not, please manually restart the computer yourself to ensure a complete cleaning.
        *****************************************
        P2P - I see you have P2P software installed on your machine (uTorrent). We are not here to pass judgment on file-sharing as a concept. However, we will warn you that engaging in this activity and having this kind of software installed on your machine will always make you more susceptible to re-infections. It is certainly contributing to your current situation.

        Please note: Even if you are using a "safe" P2P program, it is only the program that is safe. You will be sharing files from uncertified sources, and these are often infected. The bad guys use P2P filesharing as a major conduit to spread their wares.

        I would strongly recommend that you uninstall them, however that choice is up to you. If you choose to remove these programs, you can do so via Control Panel >> Add or Remove Programs.
        ********************************************
        64 bit computers leaves me with very few tools to clean the computer.

        I'd like to scan your machine with ESET OnlineScan

        •Hold down Control and click on the following link to open ESET OnlineScan in a new window.
        ESET OnlineScan
        •Click the button.
        •For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
        • Click on to download the ESET Smart Installer. Save it to your desktop.
        • Double click on the icon on your desktop.
        •Check
        •Click the button.
        •Accept any security warnings from your browser.
        •Check
        •Push the Start button.
        •ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
        •When the scan completes, push
        •Push , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
        •Push the button.
        •Push
        A log file will be saved here: C:\Program Files\ESET\ESET Online Scanner\log.txt
        Windows 8 and Windows 10 dual boot with two SSD's

        PuB_Evo

          Topic Starter


          Rookie

          • Experience: Beginner
          • OS: Windows 7
          Re: C:\windows\system32\sshnas21.dll
          « Reply #19 on: October 27, 2010, 04:50:17 PM »
          Jotti's malware scan

          http://virusscan.jotti.org/en/scanresult/53611090c51191e8c30d69e5d2b134c662bc4f80/
          ef07cf78c138dc883ea7f29d4d1ef48c3004ed0 d



          ESET OnlineScan

          Log One:

          ESETSmartInstaller@High as downloader log:
          all ok
          # version=7
          # OnlineScannerApp.exe=1.0.0.1
          # OnlineScanner.ocx=1.0.0.6211
          # api_version=3.0.2
          # EOSSerial=ce4f1901ed1eb04ca5af15ae116c1dc3
          # end=finished
          # remove_checked=true
          # archives_checked=true
          # unwanted_checked=true
          # unsafe_checked=false
          # antistealth_checked=true
          # utc_time=2010-10-27 10:43:02
          # local_time=2010-10-28 06:43:02 (+0800, Malay Peninsula Standard Time)
          # country="United States"
          # lang=1033
          # osver=6.1.7600 NT
          # compatibility_mode=512 16777215 100 0 366945 366945 0 0
          # compatibility_mode=769 16775165 100 98 499 224495256 0 0
          # compatibility_mode=5893 16776573 100 94 101705 39840352 0 0
          # compatibility_mode=8192 67108863 100 0 204 204 0 0
          # scanned=329489
          # found=2
          # cleaned=2
          # scan_time=8880
          C:\Users\User\Downloads\MS Office 2007 ULTIMATE [GR420]\MS Office 2007 ULTIMATE.iso   probably a variant of Win32/Agent.FGHQVIS trojan (deleted - quarantined)   00000000000000000000000000000000   C
          C:\Users\User\Downloads\Torrent Applications\MS Office 2003 Professional (Word, Excel, Powerpoint, Access.iso   probably a variant of Win32/Hupigon.DHMBFEX trojan (deleted - quarantined)   00000000000000000000000000000000   C
          ESETSmartInstaller@High as downloader log:
          all ok

          Log Two:

          C:\Users\User\Downloads\MS Office 2007 ULTIMATE [GR420]\MS Office 2007 ULTIMATE.iso   probably a variant of Win32/Agent.FGHQVIS trojan   deleted - quarantined
          C:\Users\User\Downloads\Torrent Applications\MS Office 2003 Professional (Word, Excel, Powerpoint, Access.iso   probably a variant of Win32/Hupigon.DHMBFEX trojan   deleted - quarantined
          « Last Edit: October 28, 2010, 01:24:34 PM by SuperDave »

          SuperDave

          • Malware Removal Specialist
          • Moderator


          • Genius
          • Thanked: 1020
          • Certifications: List
          • Experience: Expert
          • OS: Windows 10
          Re: C:\windows\system32\sshnas21.dll
          « Reply #20 on: October 28, 2010, 01:29:40 PM »
          As you can see you're getting your infections from Torrent. If there are no other issues, let's do some cleanup

          To remove all of the tools we used and the files and folders they created do the following:
          Double click OTL.exe.
          • Click the CleanUp button.
          • Select Yes when the "Begin cleanup Process?" prompt appears.
          • If you are prompted to Reboot during the cleanup, select Yes.
          • The tool will delete itself once it finishes.
          Note: If any tool, file or folder (belonging to the program we have used) hasn't been deleted, please delete it manually.
          ************************************
          Just in case you don't have a third party firewall.

          Firewalls protect against hackers and malicious intruders. You need to download a free firewall from one of these reliable vendors.

          Remember only install ONE firewall

          1) Comodo Personal Firewall (Uncheck during installation "Install Comodo SafeSurf..", Make Comodo my default search provider" and "Make Comodo Search my homepage" and uncheck any HopSurf and/or Ask.com options if you choose this one)
          2) Online Armor
          3) Agnitum Outpost
          4) PC Tools Firewall Plus

          If you are using the built-in Windows XP firewall, it is not recommended as it does not block outgoing connections. This means that any malware on your computer is free to "phone home" for more instructions. Simply put, Windows XP contains a mediocre firewall. This firewall is NO replacement for a dedicated software solution. Remember to use only one firewall at the same time.
          **********************************************
          Use the Secunia Software Inspector to check for out of date software.

          •Click Start Now

          •Check the box next to Enable thorough system inspection.

          •Click Start

          •Allow the scan to finish and scroll down to see if any updates are needed.
          •Update anything listed.
          .
          ----------

          Go to Microsoft Windows Update and get all critical updates.

          ----------

          I suggest using WOT - Web of Trust. WOT is a free Internet security addon for your browser. It will keep you safe from online scams, identity theft, spyware, spam, viruses and unreliable shopping sites. WOT warns you before you interact with a risky website. It's easy and it's free.

          SpywareBlaster- Secure your Internet Explorer to make it harder for ActiveX programs to run on your computer. Also stop certain cookies from being added to your computer when running Mozilla based browsers like Firefox.
          * Using SpywareBlaster to protect your computer from Spyware and Malware
          * If you don't know what ActiveX controls are, see here

          Protect yourself against spyware using the Immunize feature in Spybot - Search & Destroy. Guide: Use Spybot's Immunize Feature to prevent spyware infection in real-time. Note: To ensure you have the latest Immunizations always update Spybot - Search & Destroy before Immunizing. Spybot - Search & Destroy FAQ

          Check out Keeping Yourself Safe On The Web for tips and free tools to help keep you safe in the future.

          Also see Slow Computer? It may not be Malware for free cleaning/maintenance tools to help keep your computer running smoothly.
          Safe Surfing!
          Windows 8 and Windows 10 dual boot with two SSD's

          PuB_Evo

            Topic Starter


            Rookie

            • Experience: Beginner
            • OS: Windows 7
            Re: C:\windows\system32\sshnas21.dll
            « Reply #21 on: October 28, 2010, 04:40:46 PM »
            These are the issues i face after i run windows before doing anything.



            uTorrent applications have been removed.

            I have issues installing any of these firewalls. It proms me saying im on a 64bits OS platform so installation cannot go on for any of the four.
             
            1) Comodo Personal Firewall (Uncheck during installation "Install Comodo SafeSurf..", Make Comodo my default search provider" and "Make Comodo Search my homepage" and uncheck any HopSurf and/or Ask.com options if you choose this one)
            2) Online Armor
            3) Agnitum Outpost
            4) PC Tools Firewall Plus

            Some of the updates that i need to attend to from using Secunia Software Inspector are not being carried out because of the pictures below.



            Last but not least is Windows Live Essentials 2011 (KB2434419) an important update that i must have?


            SuperDave

            • Malware Removal Specialist
            • Moderator


            • Genius
            • Thanked: 1020
            • Certifications: List
            • Experience: Expert
            • OS: Windows 10
            Re: C:\windows\system32\sshnas21.dll
            « Reply #22 on: October 28, 2010, 05:06:20 PM »
            Please do this even if you don't have your OS disk.We'll deal with the first two errors first.

            Do you have your OS  CD/DVD?

            If so,

            1/ Click the Start button.

            2/ From the Start Menu, Click All programs followed by Accessories.

            3/ In the Accessories menu, Right Click on the Command Prompt option.

            4/ From the drop down menu that appears, Click on the Run as administrator option.

            5/ If you have the User Account Control (UAC) enabled you will be asked for authorisation prior to the command prompt opening. You may simply need to press the Continue button if you are the administrator or insert the administrator password etc.

            6/ In the Command Prompt window, type: sfc /scannow and then press Enter.

            7/ A message will appear stating that the system scan will begin.

            8/ Be patient because the scan may take some time.

            9/ If any files require replacing SFC will replace them. You may be asked to insert your Vista DVD for this process to continue.

            10/ If everything is okay you should, after the scan, see the following message Windows resource protection did not find any integrity violations.

            11/ After the scan has completed, Close the command prompt window.
            Windows 8 and Windows 10 dual boot with two SSD's

            PuB_Evo

              Topic Starter


              Rookie

              • Experience: Beginner
              • OS: Windows 7
              Re: C:\windows\system32\sshnas21.dll
              « Reply #23 on: October 28, 2010, 06:19:33 PM »
              Scan done. Windows resource protection did not find any integrity violations. :)

              At startup this was the issues i face at the moment. :(



              Secondly, i was told that this windows copy isn't genuine when im on OEM Windows home premium 64bits. When i validate it at MS site, it also tells me the same saying "Install genuine Windows now. Windows running on this PC is not genuine. To resolve, you must install genuine Windows now. We can help you with that."

              Lastly, i have 4 thing i need to attend to as shown below. (Just to update you on whats going on)




              SuperDave

              • Malware Removal Specialist
              • Moderator


              • Genius
              • Thanked: 1020
              • Certifications: List
              • Experience: Expert
              • OS: Windows 10
              Re: C:\windows\system32\sshnas21.dll
              « Reply #24 on: October 29, 2010, 11:18:12 AM »
              Please try changing your internet security to see if you can download the Adobe upgrade. In your browser click on Tools, Internet options and click on Security and reset it to the default.

              1. Download this diagnostics tool MGADiag.ext and save this to your Desktop.
              2. Double-click on MGADiag.exe and click Continue
              3. When the program has finished, click on Copy
              4. Post the results in your next reply.
              ****************************************
              I'm sorry but I'm not up-to-date on the workings of the Action Center in Windows 7 but if it's like Vista these messages are not too important. You'll have to investigate them on your own or start a thread in the Windows 7 Forum.
              Windows 8 and Windows 10 dual boot with two SSD's

              PuB_Evo

                Topic Starter


                Rookie

                • Experience: Beginner
                • OS: Windows 7
                Re: C:\windows\system32\sshnas21.dll
                « Reply #25 on: October 29, 2010, 01:23:34 PM »
                Is this the Internet Options you are referring to? If so how do i set it default?





                Diagnostic Report

                Diagnostic Report (1.9.0027.0):
                -----------------------------------------
                Windows Validation Data-->

                Validation Code: 50
                Cached Online Validation Code: 0x0
                Windows Product Key: *****-*****-2T399-4623F-KPRG4
                Windows Product Key Hash: TeNM47dri6KH67oIzTZ7CevGmhI=
                Windows Product ID: 00359-OEM-8702173-44458
                Windows Product ID Type: 3
                Windows License Type: OEM System Builder
                Windows OS version: 6.1.7600.2.00010300.0.0.003
                ID: {F73C1827-1795-4BC9-A691-A44DBCDC9310}(1)
                Is Admin: Yes
                TestCab: 0x0
                LegitcheckControl ActiveX: N/A, hr = 0x80070002
                Signed By: N/A, hr = 0x80070002
                Product Name: Windows 7 Home Premium
                Architecture: 0x00000009
                Build lab: 7600.win7_gdr.100618-1621
                TTS Error:
                Validation Diagnostic:
                Resolution Status: N/A

                Vista WgaER Data-->
                ThreatID(s): N/A, hr = 0x80070002
                Version: N/A, hr = 0x80070002

                Windows XP Notifications Data-->
                Cached Result: N/A, hr = 0x80070002
                File Exists: No
                Version: N/A, hr = 0x80070002
                WgaTray.exe Signed By: N/A, hr = 0x80070002
                WgaLogon.dll Signed By: N/A, hr = 0x80070002

                OGA Notifications Data-->
                Cached Result: N/A, hr = 0x80070002
                Version: N/A, hr = 0x80070002
                OGAExec.exe Signed By: N/A, hr = 0x80070002
                OGAAddin.dll Signed By: N/A, hr = 0x80070002

                OGA Data-->
                Office Status: 114 Blocked VLK 2
                Microsoft Office Professional Edition 2003 - 114 Blocked VLK 2
                Microsoft Office Enterprise 2007 - 108 Invalid VLK
                OGA Version: N/A, 0x80070002
                Signed By: N/A, hr = 0x80070002
                Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005

                Browser Data-->
                Proxy settings: N/A
                User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
                Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
                Download signed ActiveX controls: Prompt
                Download unsigned ActiveX controls: Disabled
                Run ActiveX controls and plug-ins: Allowed
                Initialize and script ActiveX controls not marked as safe: Disabled
                Allow scripting of Internet Explorer Webbrowser control: Disabled
                Active scripting: Allowed
                Script ActiveX controls marked as safe for scripting: Allowed

                File Scan Data-->

                Other data-->
                Office Details: <GenuineResults><MachineData><UGUID>{F73C1827-1795-4BC9-A691-A44DBCDC9310}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010300.0.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-KPRG4</PKey><PID>00359-OEM-8702173-44458</PID><PIDType>3</PIDType><SID>S-1-5-21-1351365764-1099244046-3730524009</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>1702   </Version><SMBIOSVersion major="2" minor="5"/><Date>20100526000000.000000+000</Date></BIOS><HWID>8EB90600010000FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Malay Peninsula Standard Time(GMT+08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>114</Result><Products><Product GUID="{90110409-6000-11D3-8CFE-0150048383C9}"><LegitResult>114</LegitResult><Name>Microsoft Office Professional Edition 2003</Name><Ver>11</Ver><Val>59D1605114E3500</Val><Hash>vfZmaSmFPIYrLWTcZSZErUQg+Fo=</Hash><Pid>73931-640-0000106-57480</Pid><PidType>14</PidType></Product><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>108</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>64BC76978749586</Val><Hash>GW6PzcEVEDTVKeO5Ym5UUm41dBk=</Hash><Pid>89388-707-0441865-65901</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="11" Result="114"/><App Id="16" Version="11" Result="114"/><App Id="18" Version="11" Result="114"/><App Id="19" Version="11" Result="114"/><App Id="1A" Version="11" Result="114"/><App Id="1B" Version="11" Result="114"/><App Id="44" Version="11" Result="114"/><App Id="15" Version="12" Result="108"/><App Id="16" Version="12" Result="108"/><App Id="18" Version="12" Result="108"/><App Id="19" Version="12" Result="108"/><App Id="1A" Version="12" Result="108"/><App Id="1B" Version="12" Result="108"/><App Id="44" Version="12" Result="108"/><App Id="A1" Version="12" Result="108"/><App Id="BA" Version="12" Result="108"/></Applications></Office></Software></GenuineResults> 

                Spsys.log Content: 0x80070002

                Licensing Data-->
                C:\Windows\system32\slmgr.vbs(1333, 5) (null): The data is invalid.

                Windows Activation Technologies-->
                HrOffline: 0x00000000
                HrOnline: 0xC004C533
                HealthStatus: 0x0000000000000000
                Event Time Stamp: 10:29:2010 22:27
                ActiveX: Registered, Version: 7.1.7600.16395
                Admin Service: Registered, Version: 7.1.7600.16395
                HealthStatus Bitmask Output:


                HWID Data-->
                N/A, hr = 0x8007000d

                OEM Activation 1.0 Data-->
                N/A

                OEM Activation 2.0 Data-->
                BIOS valid for OA 2.0: yes, but no SLIC table
                Windows marker version: N/A
                OEMID and OEMTableID Consistent: N/A
                BIOS Information:
                  ACPI Table Name   OEMID Value   OEMTableID Value
                  APIC         052610      APIC1552
                  FACP         052610      FACP1552
                  SRAT         AMD         FAM_F_10
                  HPET         052610      OEMHPET
                  MCFG         052610      OEMMCFG
                  OEMB         052610      OEMB1552

                PuB_Evo

                  Topic Starter


                  Rookie

                  • Experience: Beginner
                  • OS: Windows 7
                  Re: C:\windows\system32\sshnas21.dll
                  « Reply #26 on: October 29, 2010, 07:11:31 PM »
                  I went into MSCONFIG to try and disable UAC, however when I went tools>UAC settings>launch, it said access denied. I tried doing it through Control Panel>user accounts but it wouldn't save the settings, once I clicked OK, nothing would happen, and if I left it, then went back to it, the setting would then get reverted. My friend said my Administrative privledges are probably corrupt or something similar.

                  SuperDave

                  • Malware Removal Specialist
                  • Moderator


                  • Genius
                  • Thanked: 1020
                  • Certifications: List
                  • Experience: Expert
                  • OS: Windows 10
                  Re: C:\windows\system32\sshnas21.dll
                  « Reply #27 on: October 30, 2010, 11:51:09 AM »
                  Quote
                  Is this the Internet Options you are referring to? If so how do i set it default?
                  Sorry. I didn't realize you were using FireFox. Why not try adding the Adobe site to your exceptions and see what happens. Just click on Exceptions and add that site to the exception list. Or, you could try using Internet Explorer.
                  ********************************************************
                  There's something freaky going on with your OS. Your best bet would be to contact MicroSoft and see if they can help.
                  ************************************************

                  Backup the Registry with ERUNT

                  •Download ERUNT
                  •Click on the erunt-setup.exe
                  •Follow the prompts to install ERUNT
                  •Choose language
                  •A set up window will pop up. It will ask: Create ERUNT entry in to the Start up folder, answer NO



                  •Backup your registry to the default location

                  Note: To restore your registry (if needed), go to the folder and start ERDNT.exe
                  ***********************************************

                  Go to Start > Run and type notepad.exe then click OK

                  Copy and paste the below into Notepad and save as fixme.reg to Your Desktop

                  Code: [Select]
                  REGEDIT4

                  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
                  "ConsentPromptBehaviorUser"=0x00000001

                  [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
                  "ConsentPromptBehaviorUser"=0x00000001

                  Locate fixme.reg on your Desktop and double-click it. Answer Yes when prompted to merge with the Registry.

                  Make sure that you tell me if you receive a success message about adding the above to the registry. If you do not get a success message, it did not work.
                  Windows 8 and Windows 10 dual boot with two SSD's

                  PuB_Evo

                    Topic Starter


                    Rookie

                    • Experience: Beginner
                    • OS: Windows 7
                    Re: C:\windows\system32\sshnas21.dll
                    « Reply #28 on: October 30, 2010, 06:18:55 PM »
                    I received a success message about adding the above to the registry.  :)

                    SuperDave

                    • Malware Removal Specialist
                    • Moderator


                    • Genius
                    • Thanked: 1020
                    • Certifications: List
                    • Experience: Expert
                    • OS: Windows 10
                    Re: C:\windows\system32\sshnas21.dll
                    « Reply #29 on: October 30, 2010, 06:49:26 PM »
                    Are you still having the Adm. restrictions problems?
                    Windows 8 and Windows 10 dual boot with two SSD's