BlackBerry MSFT Exchange caused NokNok.800

Discussion in 'malware problems & news' started by egberts, Jul 29, 2004.

Thread Status:
Not open for further replies.
  1. egberts

    egberts Registered Member

    Joined:
    Jul 29, 2004
    Posts:
    2
    When working in an enterprise setting where BlackBerry Mail server is done centrally by a specialized Microsoft Exchange server having BlackBerry RIM Pager support, the Trojan Hunter (3.9 Build 807) on a workstation reports a possible false port-scan alarm for

    MAPISP32.EXE.

    Port scan
    Port 1130/UDP is open (Matches Noknok.800. Port being used by process MAPISP32.EXE/PID 1640) (Tell me more about port alerts...)
    Port 1130/UDP is open (Matches Noknok.820. Port being used by process MAPISP32.EXE/PID 1640) (Tell me more about port alerts...)

    The MAPISP32.EXE file location (according to TCPView) is standard Windows Common Files for MAPI purposes.
    /Program Files/Common Files/SYSTEM/Mapi/1033/NT was the location of MAPISP32.EXE


    Generally (loosely) speaking; am I okay so far?
     
  2. illukka

    illukka Spyware Fighter

    Joined:
    Jun 23, 2003
    Posts:
    633
    Location:
    S.A.V.O
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.