Coffeehouse Thread

6 posts

Forum Read Only

This forum has been made read only by the site admins. No new threads or comments can be added.

Outlook Help!

Back to Forum: Coffeehouse
  • User profile image
    z3ek

    Hi folks

    Im having a problems with Outlook 2002. Now and again my Incoming mail server (POP3) changes to "localhost" and my username becomes usersname/mail.blahblah.com I don’t know what could be causing this. I've update Outlook with all the latest patches and service packs, and still the problem is there. Anyone have any ideas. The screenshot below might give you a little more help into what problem im having.

    Thanks. helpsmilie.gif


    <IMG style="http://da.mor-pah.net/chips.jpg

  • User profile image
    mitch

    I think I saw something similar on one of my systems. In my case it was due to the antivirus email scanner.

  • User profile image
    Maurits

    This is a standard method that POP3 proxies use.

    Another program is installed on your computer.  It's trying to convince Outlook to talk to IT instead of going directly to mail.blahblah.com

    Outlook is only too happy to oblige.

    The program then receives POP3 requests from Outlook, relays them to mail.blahblah.com, receives responses from mail.blahblah.com, and filters them as it sees fit before handing them back to Outlook.

    This could be very good or very bad depending on what program is doing this.  That program has access to all of your email as well as your password.

    The POP3 port is 110 by default.  Click More Settings to see if that has been changed too.

    You can see which program is handling the POP3 requests on your machine by finding out which process is listening on port 110.  One way to do this is Foundstone's fport utility.  Foundstone is a division of McAfee.

  • User profile image
    W3bbo

    Maurits wrote:
    The POP3 port is 110 by default.  Click More Settings to see if that has been changed too.

    You can see which program is handling the POP3 requests on your machine by finding out which process is listening on port 110.  One way to do this is Foundstone's fport utility.  Foundstone is a division of McAfee.


    I prefer TCPView

  • User profile image
    Maurits

    Hmmm... I can't figure out how to get TCPView to show the full-path-filename of the running processes.  This could be important if the malware is named, say, C:\Windows\Outlook.exe and has an icon that looks like the real Outlook's.

    EDIT: the console tool (tcpvcon.exe) portion of TCPView DOES show the full-path-filename.

  • User profile image
    Mike Dimmick

    Maurits wrote:
    Hmmm... I can't figure out how to get TCPView to show the full-path-filename of the running processes.  This could be important if the malware is named, say, C:\Windows\Outlook.exe and has an icon that looks like the real Outlook's.


    Right-click the row, choose Process Properties. This shows the full path and the command line used to start the process.

Conversation locked

This conversation has been locked by the site admins. No new comments can be made.