I'm Michael. :P That specific event is insufficient to indicate malware, of any type.
From: [email protected] [mailto:[email protected]] On Behalf Of J- P Sent: Tuesday, August 27, 2013 10:38 PM To: [email protected]; [email protected] Subject: RE: [Exchange] event 9646 presumably an outlook addin? nothing to indicate maleware virus etc.. Thanks Mike Jean-Paul Natola ________________________________ From: [email protected]<mailto:[email protected]> To: [email protected]<mailto:[email protected]>; [email protected]<mailto:[email protected]> Subject: RE: [Exchange] event 9646 Date: Wed, 28 Aug 2013 02:32:38 +0000 Usually means that they have some poorly written add-in. From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of J- P Sent: Tuesday, August 27, 2013 10:25 PM To: [email protected]<mailto:[email protected]>; [email protected]<mailto:[email protected]> Subject: [Exchange] event 9646 Hi all, Im seeing a bunch of 9646 event on ex2013 every 10 minutes give or take for once user Is this something that could indicate some type of malware? Mapi session /o=First Organization/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx with client type MoMT exceeded the maximum of 500 objects of type Folder.
