What is netdom.exe?
netdom.exe is a legitimate command line tool that comes built-in with Windows operating system and was introduced by Microsoft Corporation. It is typically located in c:\windows\system32. Malware programmers write malicious codes and name it after netdom.exe with an intention to spread virus on the internet.
Affected Platform: Windows OS
How to check if your computer is infected with netdom.exe malware?
If your PC is infected with netdom.exe malware, it will cause your PC to slow down or it will involuntarily redirect you to unknown websites. Take the following steps to diagnose your PC for possible netdom.exe malware attack:
Step 1: Simultaneously press CTRL+ALT+DEL keys to open Task Manager.
Step 2: If you notice the file located outside the file path c:\windows\system32, then you should run an antivirus scan to get ride of the malware.
How to remove the netdom.exe file from system using Comodo Antivirus?
Step 1: Download the award-winning Comodo Antivirus.
Step 2: Installation configuration frames will be displayed. Select the configuration you would like to apply.
Step 3: Select Customize Configuration option and arrange installers, configuration, and file location.
Step 4: Restart your PC.
Step 5: It will take some time for the Comodo Internet Security to update the antivirus.
Step 6: Proceed with a quick scan that automatically begins after the update.
Step 7: If threats are found during the scanning, you will be prompted with an alert screen.
Step 8: Comodo Antivirus will remove the netdom.exe virus from your computer including all other malwares!
First Seen: 07 November 2010 at 9:29 pm
| No. | Company | File Type | SHA1 | MD5 | Malware Name |
Digitally Signed |
File Version |
Product Version |
Submitted From |
Malware Behavior |
|---|---|---|---|---|---|---|---|---|---|---|
| 1 | Microsoft Corporation | Executable | c25d8addffaf63c5 720c2908587c05aa cafffa0c |
6af17839a00f7846 3af991ee4db173a9 |
Unclassified Malware |
No | 5.2.3790.1 830 (srv03_sp1 _rtm.05032 4-1447) |
5.2.3790.1 830 |
 Internal Submission |
N/A |
| 2 | Microsoft Corporation | Executable | c2d801718e2c23eb 54729bb1d0fdee60 f337cb21 |
3b79363584065595 6d24a9c25fb20787 |
MalCrypt.Ind us! |
No | 5.2.3790.0 (srv03_rtm .030324-20 48) |
5.2.3790.0 |  Brazil |
N/A |
| 3 | Microsoft Corporation | Executable | 794a9736aad351ed 4c108d0fec6d922a 9c64c1e7 |
1aa9faa160639bc5 95dd28d0e9d5c52d |
Virus.Win32. Sality.gen |
No | 5.1.2600.5 512 (xpsp.0804 13-2113) |
5.1.2600.5 512 |
 Ukraine |
N/A |
Display 4 items per page
- 4 items per page
- 8 items per page
- 16 items per page
- 32 items per page
First Seen: 26 September 2008 at 2:40 am
| No. | Company | File Type | SHA1 | MD5 | Digitally Signed |
File Version |
Product Version |
Submitted From |
|---|---|---|---|---|---|---|---|---|
| 1 | Microsoft Corporation | Executable | 32a282741ffe87c3 dc48e0d467f6689b c8328663 |
8ef499bf76d3a85a cdd2f11dc823694d |
No | 5.1.2600.2 180 (xpsp_sp2_ rtm.040803 -2158) |
5.1.2600.2 180 |
 India |
| 2 | Microsoft Corporation | Executable | 6fd79f2fe96dda7c 179859e8c96924bc 0f66e82a |
ef000cdb84f65a1e adad656444f0af09 |
No | 5.00.2184. 1 |
5.00.2184. 1 |
10.100.130.247/32 |
| 3 | Microsoft Corporation | Executable | 4bbc7f5fb40cbcd6 b166b6673ed9cbe7 0b47184f |
7bafbaa1c65000cc 12ea2229ac1ab8e1 |
No | 5.1.2600.0 (xpclient. 010817-114 8) |
5.1.2600.0 | 10.100.130.247/32 |
| 4 | N/A | Non-executable | d993ff8edcba0d8a 402ba1e08997d607 19d2b2e8 |
71ad1d413683d173 581c9d99b7affd64 |
No | N/A | N/A |  United States |
Lithuania
Netherlands
Romania
France
