Multiple Programs – NTDETECT.COM, NTDETECT.EXE

Ntdetect.com and ntdetect.col are valid operating system files that run on system startup. These files detect the computer hardware you have and matches it with your Windows registry. If you run WinPatrol 10.x or later, you'll see these files in your Hidden Files list. This is normal. If you delete these files, Windows won't boot. If your system hangs while inspecting your hardware, Microsoft describes how to use ntdetect.com: http://support.microsoft.com/kb/103659. You can learn how to create a bootable disk for an NTFS or FAT partition at http://support.microsoft.com/kb/q119467/.

Ntdetect.exe is a completely different file. It installs with Trojan.W32.Small. This Trojan could allow a remote user to access your system. This user could download, install, run or delete files and could steal personal information. If you have this file, we'd recommend removing it using WinPatrol. First, kill it under your Active Tasks then remove it from your Startup Programs and/or IE Helpers. If running WinPatrol 8.x or later; right click the file then select "Delete file on Reboot". Finally, reboot your system.

Safe if not virus

Microsoft