HT Logs. Tips, FAQs, Analyze.

mlthnj.dll is a harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: mlthnj
Filename: mlthnj.dll
Registry key:

HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager\appcertdlls

Command: c:\windows\system32\config\systemprofile\Local Settings\Application Data\Windows Server\mlthnj.dll
Startup Type: AppSecDll
Combofix:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager\appcertdlls]
AppSecDll REG_SZ c:\windows\system32\config\systemprofile\Local Settings\Application Data\Windows Server\mlthnj.dll

Description: desc
Notes: trojan also known as Trojan.Agent/Gen-FakeAV, which is installed with a rogue antispyware program.

How to remove: use Registry editor + Malwarebytes` Anti-malware

mshlps.dll is a harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: mshlps
Filename: mshlps.dll
Registry key|value:

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls | AppSecDll = “C:\Windows\System32\mshlps.dll”
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls | AppSecDll = “C:\Windows\System32\mshlps.dll”

Command: %WinDir%\System32\mshlps.dll
Startup Type: AppCertDlls
Description: trojan also known as Trojan.Win32.Agent.deou [Kaspersky Lab]. Its installed with kbdsock.dll trojan.

How to remove: use Windows Registry editor + Kaspersky virus removal tool

wincert.dll is a harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: wincert
Filename: wincert.dll
Registry key:

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls | AppSecDll

Command: C:\Windows\System32\wincert.dll
Startup Type: AppCertDlls
Description: trojan also known as Mal/Xilcter-A [Sophos]

How to remove: use Malwarebytes` Anti-malware + Kaspersky virus removal tool