Hi DavidR,
Your memory is as good as mine, added-Google-brain, and reading again through this thread, it is an acer file, and I am working on an acer.
Re:
http://discussions.virtualdr.com/showthread.php?t=230207Good old castlecops cannot back me up here, I am afraid, but I put my cards now on a SAS FP here,
KILL1211.EXE seems to come with Acer pc's (Acer ePower Management suite) and not to be malicious, and because I have an Acer it is probably so,
re:
http://www.nationaalcomputerforum.nl/showthread.php?t=32419The other one flagged executable, KCMDNIns.EXE, has to do with Acer Empowering Technology Monitor
C:\WINDOWS\system32\SysMonitor.exe and I experienced it would make [eRecoveryService]
C:\Acer\Empowering Technology\eRecovery\eRAgent.exe stop working and that would
not be good so, that's why I was asking about KCMDNIns.exe TR/Inject.aed then, and about this re-flagged as Trojan.Unknown.Origin by SAS.
So more than likely final verdict to both: False Positive,
polonus