joindomain.exe

Discussion in 'other security issues & news' started by nadirah, Apr 5, 2007.

Thread Status:
Not open for further replies.
  1. nadirah

    nadirah Registered Member

    Joined:
    Oct 14, 2003
    Posts:
    3,647
    Got this file, called joindomain.exe
    It runs via the command line, and this is the text upon execution:

    Microsoft Windows XP [Version 5.1.2600]
    (C) Copyright 1985-2001 Microsoft Corp.

    C:\Documents and Settings\>"C:\Documents and Settings\\Desktop\Sec
    urity tools\joindomain.exe"

    Long Live the Great Free Software Foundation!!
    One step domain joiner. Copyright CCK, Late Summer 2003.
    W2k users, pls point to the correct DNS server b4 joining.
    Remember Software Freedom.

    Bad domain parameter in ini file

    C:\Documents and Settings\>

    Anyone knows what this file is? And where does it originate from?
     
  2. Seer

    Seer Registered Member

    Joined:
    Feb 12, 2007
    Posts:
    1,596
    Location:
    Singidunum
    Hello. :)

    I found this googling here:

    Untitled.png

    I'm not sure how valid is this link, but I would delete this initially. I don't know why you ran that in the first place. That's an encyclopaedia example of suspicious name. :)
     
  3. nadirah

    nadirah Registered Member

    Joined:
    Oct 14, 2003
    Posts:
    3,647
    Hello,

    Scans of the file joindomain.exe at virustotal and jotti turned up clean. Scanned the file with Mcafee Virusscan Enterprise 8.5i on my computer and nothing found either.

    It appears to be a command-line tool for joining computers to a domain.
     
  4. Seer

    Seer Registered Member

    Joined:
    Feb 12, 2007
    Posts:
    1,596
    Location:
    Singidunum
    I don't think it has to be something malicious. But the fact that I haven't found many instances by googling it, made it look suspicious to me. Look here.
     
Thread Status:
Not open for further replies.