Confused: ESET HIPS says Outlook file has changed. Scans find nothing.

Discussion in 'malware problems & news' started by mattfrog, Apr 10, 2012.

Thread Status:
Not open for further replies.
  1. mattfrog

    mattfrog Registered Member

    Joined:
    Apr 3, 2012
    Posts:
    85
    Location:
    United Kingdom
    Hi all,

    Very confused at the moment. ESET Smart Security 5 HIPS process has alerted me upon launching Outlook that the file has changed. It may have - today was patch Tuesday..

    But then it wants to connect to the address shown in the screenshot, a subdomain of e100.net, on port 993 (IMAP).

    I use Google Apps for Business as my provider. e100.net is a domain registered in China, cue alarm bells.

    ESET scan shows nothing untoward on this Win 7 64bit system. Neither does a Hitman Pro scan.

    Any one know what's going on? Did the updates today change Outlook's files at all?

    Thanks in advance
     

    Attached Files:

  2. mattfrog

    mattfrog Registered Member

    Joined:
    Apr 3, 2012
    Posts:
    85
    Location:
    United Kingdom
    Oh wow, this is why you should never stay up until 4am playing with software, folks.

    It's 1e100.net, owned by Google.

    *skulks away very embarrassed* :D :D
     
  3. xxJackxx

    xxJackxx Registered Member

    Joined:
    Oct 23, 2008
    Posts:
    8,935
    Location:
    USA
    Outlook was definitely changed by the updates yesterday. I had that warning on 2 machines.
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.