What is sshook.dll?

Sshook.dll is a Windows DLL file. DLL is the abbreviation for Dynamic Link Library. DLL files are needed by programs or web browser extensions, because they contain program code, data, and resources. The following information can help you determine if sshook.dll is a Windows system file or if it belongs to an application that you can trust.

Click to Run a Free Scan for sshook.dll related errors

Sshook.dll file information

The process known as Anti-Spyware Shell Extension or SpySubtract Shell Extension belongs to software Trend Micro Anti-Spyware or SpySubtract by Trend Micro ( or InterMute (

Description: Sshook.dll is not essential for Windows and will often cause problems. Sshook.dll is located in a subfolder of "C:\Program Files". Known file sizes on Windows 10/8/7/XP are 77,824 bytes (91% of all occurrences) or 73,728 bytes. 
This is a special .dll file (Dynamic Link Library), which starts automatically when programs are launched. So it can monitor or manipulate all of your program starts. The program has no visible window. It is not a Windows core file. The program can be uninstalled in the Control Panel. It monitors program starts. Therefore the technical security rating is 48% dangerous, however you should also read the user reviews.

Uninstalling this variant: It is possible to completely remove Trend Micro Anti-Spyware or SpySubtract (Control Panel ⇒ Uninstall a Program).

Recommended: Identify sshook.dll related errors

Important: Some malware camouflages itself as sshook.dll, particularly when located in the C:\Windows or C:\Windows\System32 folder. Therefore, you should check the sshook.dll process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.


User Comments

InterMute inc. Spysubtract Shell extension (located in program files folder)
This is an ad-ware / spy-ware program that is recommended with HP / Compaq computers
  MIchael Palmer  
This is an Ad-ware / Spy-ware that runs in the backbround

Rating chart

Summary: Average user rating of sshook.dll: based on 6 votes with 3 user comments. One user thinks sshook.dll is essential for Windows or an installed application. One user thinks it's probably harmless. 3 users think it's neither essential nor dangerous. One user suspects danger.

Do you have additional information? Help other users!
What do you know about sshook.dll:
How would you rate it:
Link for more info:
Your Name:

Best practices for resolving sshook issues

A clean and tidy computer is the key requirement for avoiding problems with sshook. This means running a scan for malware, cleaning your hard drive using cleanmgr and sfc /scannow, uninstalling programs that you no longer need, checking for Autostart programs (using msconfig) and enabling Windows' Automatic Update. Always remember to perform periodic backups, or at least to set restore points.

Should you experience an actual problem, try to recall the last thing you did, or the last thing you installed before the problem appeared for the first time. Use the resmon command to identify the processes that are causing your problem. Even for serious problems, rather than reinstalling Windows, you are better off repairing of your installation or, for Windows 8 and later versions, executing the DISM.exe /Online /Cleanup-image /Restorehealth command. This allows you to repair the operating system without losing data.

To help you analyze the sshook.dll process on your computer, the following programs have proven to be helpful: Security Task Manager displays all running Windows tasks, including embedded hidden processes, such as keyboard and browser monitoring or Autostart entries. A unique security risk rating indicates the likelihood of the process being potential spyware, malware or a Trojan. Malwarebytes Anti-Malware detects and removes sleeping spyware, adware, Trojans, keyloggers, malware and trackers from your hard drive.

Other processes

sshook.dll [all]