The file %WinDir%\NIRCMDC.EXE is identified as the Trojan Program that is used for stealing bank information and users passwords.
To delete %WinDir%\NIRCMDC.EXE we suggest you should use UnHackMe:
http://www.unhackme.com

%WinDir%\NIRCMDC.EXE Information and Removal:
NIRCMDC.EXE is known as: Trojan.Win32.Agent2.cpqm [Kaspersky Lab] Trojan.Win32.Agent2 [Ikarus].
MD5 of NIRCMDC.EXE = D7C9955CB8B57823B9B0590EB3C49458
NIRCMDC.EXE size is 36864 bytes.
Full path on a computer: %WINDIR%\NIRCMDC.EXE
Related Files:
C:\BT\BT.LNK
C:\BT\DISABLE\BT.CMD
C:\BT\ENABLE\BT.CMD
%TEMP%\1.TMP\CHECKOS.TXT
%TEMP%\1.TMP\STRINGCHECK.TXT
%TEMP%\1.TMP\X64.EXE
%TEMP%\1.TMP\X86.EXE
%PROGRAMFILES%\LAUNCH MANAGER\5920BT.EXE
%PROGRAMFILES%\LAUNCH MANAGER\BLUETOOTHCFG.EXE
%PROGRAMFILES%\LAUNCH MANAGER\BT.EXE
%PROGRAMFILES%\LAUNCH MANAGER\INSTALL.BAT
%PROGRAMFILES%\LAUNCH MANAGER\INSTALL.EXE
%PROGRAMFILES%\LAUNCH MANAGER\LMANAGER.EXE
%PROGRAMFILES%\LAUNCH MANAGER\MMKEYBD.CFG
%PROGRAMFILES%\LAUNCH MANAGER\MMKEYBDBT.CFG
%PROGRAMFILES%\LAUNCH MANAGER\PANEL\LMANAGER.ICO
%PROGRAMFILES%\LAUNCH MANAGER\POWERTOGGLE.EXE
%PROGRAMFILES%\LAUNCH MANAGER\RELEASE.TXT
%PROGRAMFILES%\LAUNCH MANAGER\SETTINGS.REG
%PROGRAMFILES%\LAUNCH MANAGER\SYNTPSCROLLFIX.EXE
%PROGRAMFILES%\LAUNCH MANAGER\WHQL_LH\DKBFLTR.SYS
%PROGRAMFILES%\LAUNCH MANAGER\WHQL_LH\LMANAGER.CAT
%PROGRAMFILES%\LAUNCH MANAGER\WHQL_LH\LMANAGER.INF
%WINDIR%\DEVCON.EXE
%WINDIR%\HSTART.EXE
%WINDIR%\NIRCMD.EXE
%WINDIR%\NIRCMDC.EXE