Ntpsapi.dll is a Spyware.WindowsKey. Ntpsapi.dll monitors user Internet activity and private information. It sends stolen data to a hacker site. Related files: %SystemDrive%\Programs\Keylogger5\Krnlmod.exe %SystemDrive%\Programs\Keylogger5\Ntpsapi.dll %SystemDrive%\Programs\Keylogger5\Watchdll.dll Adds the value: "Krnlmod" = "%SystemDrive%\Programs\Keylogger5\Krnlmod.exe" to the Windows startup registry keys. More info: http://securityresponse.symantec.com/avc... Removal: Remove Ntpsapi.dll from Windows startup using antivirus (also check How To Remove section)Startup Optimizer.