Confused: ESET HIPS says Outlook file has changed. Scans find nothing.

Discussion in 'malware problems & news' started by mattfrog, Apr 10, 2012.

Thread Status:
Not open for further replies.
  1. mattfrog

    mattfrog Registered Member

    Joined:
    Apr 3, 2012
    Posts:
    78
    Location:
    United Kingdom
    Hi all,

    Very confused at the moment. ESET Smart Security 5 HIPS process has alerted me upon launching Outlook that the file has changed. It may have - today was patch Tuesday..

    But then it wants to connect to the address shown in the screenshot, a subdomain of e100.net, on port 993 (IMAP).

    I use Google Apps for Business as my provider. e100.net is a domain registered in China, cue alarm bells.

    ESET scan shows nothing untoward on this Win 7 64bit system. Neither does a Hitman Pro scan.

    Any one know what's going on? Did the updates today change Outlook's files at all?

    Thanks in advance
     

    Attached Files:

  2. mattfrog

    mattfrog Registered Member

    Joined:
    Apr 3, 2012
    Posts:
    78
    Location:
    United Kingdom
    Oh wow, this is why you should never stay up until 4am playing with software, folks.

    It's 1e100.net, owned by Google.

    *skulks away very embarrassed* :D :D
     
  3. xxJackxx

    xxJackxx Registered Member

    Joined:
    Oct 23, 2008
    Posts:
    3,628
    Location:
    USA
    Outlook was definitely changed by the updates yesterday. I had that warning on 2 machines.
     
Thread Status:
Not open for further replies.