How to remove nircmd.exe

nircmd.exe

The module nircmd.exe has been detected as Risk.Gen

nircmd.exe
Product Name:

NirCmd

Company Name:

NirSoft

MD5: f642942dc222cc9608cd2f7b1608d3ab
Size: 49 KB
First Published: 2017-08-10 22:06:02 (7 years ago)
Latest Published: 2017-10-11 04:03:27 (7 years ago)
Status: Risk.Gen (on last analysis)
Analysis Date: 2017-10-11 04:03:27 (7 years ago)
Signed By: Orbweb Taiwan Inc.
Status: Invalid (digital signature could be stolen or file could be patched)
%programfiles%\orbweb inc\orbweb.me\bin
%appdata%\orbweb inc\orbweb.me 4.5.25.323\install\0c53dfa\bin
25.0%
25.0%
25.0%
25.0%
Windows 10 75.0%
Windows 7 25.0%
Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00019d40

PE Sections:

Name Size of data MD5
UPX0 0 00000000000000000000000000000000
UPX1 40960 1305b13f2af0811e9644ea5832ed20d2
.rsrc 2560 eacf3e9ac96593f0fed57ad23f54e9e7

More information:

Download GridinSoft Anti-Malware - Removal tool for nircmd.exe