BlackBerry MSFT Exchange caused NokNok.800

Discussion in 'malware problems & news' started by egberts, Jul 29, 2004.

Thread Status:
Not open for further replies.
  1. egberts

    egberts Registered Member

    Joined:
    Jul 29, 2004
    Posts:
    2
    When working in an enterprise setting where BlackBerry Mail server is done centrally by a specialized Microsoft Exchange server having BlackBerry RIM Pager support, the Trojan Hunter (3.9 Build 807) on a workstation reports a possible false port-scan alarm for

    MAPISP32.EXE.

    Port scan
    Port 1130/UDP is open (Matches Noknok.800. Port being used by process MAPISP32.EXE/PID 1640) (Tell me more about port alerts...)
    Port 1130/UDP is open (Matches Noknok.820. Port being used by process MAPISP32.EXE/PID 1640) (Tell me more about port alerts...)

    The MAPISP32.EXE file location (according to TCPView) is standard Windows Common Files for MAPI purposes.
    /Program Files/Common Files/SYSTEM/Mapi/1033/NT was the location of MAPISP32.EXE


    Generally (loosely) speaking; am I okay so far?
     
  2. illukka

    illukka Spyware Fighter

    Joined:
    Jun 23, 2003
    Posts:
    633
    Location:
    S.A.V.O
Thread Status:
Not open for further replies.