Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 1 subscriber
  • Views 1652 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Worm Hobbit - Port 2337 Outlook.exe

RogueViper

Any ideas why Outlook would be using a non standard port? Wonder if anyone can help. 

I have ran a GFI LANguard vulnerability scan on my local network. 

GFI has detected that my computer has port 2337, which it has associated with a trojan port. I used the netstat -p -ano to pull back a list of ports with their process IDs. Then checked the PID against the task manager PID column, which returned the process as Outlook.exe using port 2337. 

Note, my computer is the only one in the company with port 2337 open. 

This port is associated with worm hobbit.  I have ran a full system scan on my machine using Sophos and it has detected nothing. 

:16033


This thread was automatically locked due to age.
Parents
  • 0

    Came into work this morning and re-opened the Outlook client. 

    Port 2337 is no longer being used by Outlook. I installed the process explorer as recommended and Outlook.exe has a verifiied Microsoft signature. 

    Just hoping it was a one off. I really want to find out now why it was using that port. Been driving me up the wall trying to work it out.  

    :16059
Reply
  • 0

    Came into work this morning and re-opened the Outlook client. 

    Port 2337 is no longer being used by Outlook. I installed the process explorer as recommended and Outlook.exe has a verifiied Microsoft signature. 

    Just hoping it was a one off. I really want to find out now why it was using that port. Been driving me up the wall trying to work it out.  

    :16059
Children
No Data