How to Remove “dsamain.exe”

What is dsamain.exe?


dsamain.exe is a legitimate process file popularly known as AD/AM Active Directory Application Mode. It is associated with ADAM Active Directory Application Mode developed by Microsoft Corporation. It is located in C:\WINDOWS\System32 by default.

Malware programmers write virus files with malicious scripts and save them as dsamain.exe with an intention to spread virus on the internet.

Affected Platforms: Windows OS

How to determine if your computer is infected with dsamain.exe malware?

Look out for the these symptoms to check if your PC is infected with dsamain.exe malware:

  • Unstable internet connection
  • dsamain.exe occupies extra CPU space
  • PC processing speed slows down
  • Browser often redirects to irrelevant websites
  • Browser is bombarded with hordes of popup ads
  • Computer screen freezes repeatedly

Take the following steps to diagnose your PC for possible dsamain.exe malware attack:

Step 1: Simultaneously press CTRL+ALT+DEL keys to open Task Manager.

Step 2: If you notice the file located outside C:\WINDOWS\System32 perform an antivirus scan to get rid of the malware.

How to remove dsamain.exe malware from system using Comodo Antivirus?

Step 1: Download our award-winning Free Antivirus

Step 2: Installation configuration frames will be displayed. Select the configuration you would like to apply.

Step 3: Select Customize Configuration option and arrange installers, configuration, and file location.

Step 4: Restart your PC after the installation gets over

Step 5: Wait for Comodo Internet Security to update the antivirus.

Step 6: Proceed with the quick scan that automatically begins after the update.

Step 7: If threats are found during the scanning, you will be notified through an alert screen.

Step 8: Comodo Antivirus will remove dsamain.exe malware from your computer including all other malwares!
 

5

Malware Entries

First Seen: 13 November 2010 at 10:41 pm
No. Company File Type SHA1 MD5 Malware
Name
Digitally
Signed
File
Version
Product
Version
Submitted
From
Malware Behavior
1 N/A Executable 9cb8ecacdd08b9df
80d9ec082a988dbf
37e2642f
486205089a72e0f2
0a771dd7e219021a
Win32.Viking
.AG~clean
No 1.0.0.0 1.0.0.0 China N/A
2 Microsoft Corporation Executable 25f9a8c3a18b5157
fe9bcb1dfc0834af
871ecd7e
74846541bc603359
990910f394e20b1e
Virus.Win32.
Ramnit.H
No 1.1.3790.2
075
(dnsrv_r2.
051122-235
0)
1.1.3790.2
075
Indonesia N/A
3 Microsoft Corporation Executable b5b6a6fbbfc2015a
45048558a64474a4
f3ba03bf
08a69d02cd5c94f6
5c4d38f805569b8d
Virus.Win32.
Sality.gen
No 1.1.3790.2
075
(dnsrv_r2.
051122-235
0)
1.1.3790.2
075
Brazil N/A
4 Microsoft Corporation Executable 93907886a50b05fb
f6d4338094aa4401
4446e3e0
b147dd1985de80e9
5924c4f4ab890f5f
Virus.Win32.
Parite.gen
No 1.1.3790.2
075
(dnsrv_r2.
051122-235
0)
1.1.3790.2
075
Malaysia N/A
Display 4 items per page
  • 4 items per page
  • 8 items per page
  • 16 items per page
  • 32 items per page
26

Safe Entries

First Seen: 03 June 2009 at 8:31 am
No. Company File Type SHA1 MD5 Digitally
Signed
File
Version
Product
Version
Submitted
From
1 SEFAM Executable 06c658adeb306050
c44dd7f91eef2501
55f082b3
121e194e6f1002f3
20aeee13b17eeebe
No 2.8.0.0 2.8.0.0 United States
2 N/A Non-executable 1c80053d8ca5bb1a
93486fb758d45fd8
a66232d5
fcfeba552fde1f56
22e69f68e0a4516f
No N/A N/A 10.100.130.247/32
3 Microsoft Corporation Executable c2f8ec47fd52004a
bb096a3f3a6c2de7
5beb95a1
997074586f411aaa
65a07db2313d3f19
No 1.1.3790.2
075
(dnsrv_r2.
051122-235
0)
1.1.3790.2
075
United States
4 Microsoft Corporation Executable 208543767070e6d4
e5727997a6a5cbac
be892d86
6f85dedb5cff8338
87e85b4740df798f
No 6.2.9200.1
6384
(win8_rtm.
120725-124
7)
6.2.9200.1
6384
Netherlands
Display 4 items per page
  • 4 items per page
  • 8 items per page
  • 16 items per page
  • 32 items per page
 
Exclusive Offer
Get Free Endpoint Protection
Get Advanced
Endpoint
Protection

Award-Winning Security to Protect Your Clients from Cyber Attacks

Comodo Internet Security Pro

Free Antivirus protection from hackers! Get the ultimate Antivirus solution to keep your PC clean and to remove viruses from a slow or infected PC. Improve the PC performance at home or use it on-the-go!

Get Comodo Internet Security Comodo Internet Security