Application.NirCmd

Hi there,
I have PCtools Spyware Doctor which found two possible infections:

Name: Application.NirCmd
Threat Level: Info
Description: Application.NirCmd is a collection of third party tools packed in one executable that can be used to remove threats in an infected machine. However it can also be used by users with malicious intent to do a different activity.
Type: TT_Info

at C:\WINDOWS\erdnt\Hiv-backup\ERDNT.EXE
C:\WINDOWS\swxcacls.exe

Can anyone tell me if these are threats or legitimate software?

Thanks

 

Thanks P,

I don't know what ERDNT is - unless I downloaded it from some advice on this site.. not sure where it came from.

Read something somewhere that said it might be something to do with Combofix and am not sure if that is where I got it?

I did try Combofix at one point.:major

 

Did you run ComboFix? I did and now Spyware Doctor found 2 infections and 1 threat. Application.NirCmd in the same locations. I went through this before. I Googled uninstall ComboFix and there is a post in this forum what to do. I will follow this thread to find out what next. Good luck. I am going to restart to see if SD picks it back up.