Multiple Programs – NTDETECT.COM, NTDETECT.EXE

Ntdetect.com is a valid operating system file that runs on system startup. It detects the computer hardware you have and matches it with your Windows registry. If you run WinPatrol 10.x or later, you'll see this file in your Hidden Files list. This is normal. If you delete this file, Windows won't boot. If your system hangs while inspecting your hardware, Microsoft describes how to use ntdetect.com: http://support.microsoft.com/kb/103659. You can learn how to create a bootable disk for an NTFS or FAT partition at http://support.microsoft.com/kb/q119467/.

Ntdetect.exe is a completely different file. It installs with Trojan.W32.Small. This Trojan could allow a remote user to access your system. This user could download, install, run or delete files and could steal personal information. If you have this file, we'd recommend removing it using WinPatrol. First, kill it under your Active Tasks then remove it from your Startup Programs and/or IE Helpers. If running WinPatrol 8.x or later; right click the file then select "Delete file on Reboot". Finally, reboot your system.

Safe if not virus

Microsoft