CShell.dll is malware packer.
lol, i know everyone knows this already, but i just thought i would post it.

It is not malware. It just packed with Themida. Every file packed with themida has false positives.
Its not packed with thermidia...
why would it be packed with thermida? its not encrypted.