Version 507 (XP SP3+ x86)
DB: 1164

File: msimn.exe (C:\Program\Outlook Express\msimn.exe)
Name: Heur.Suspicious.Attribs
Heuristics Scanning/Level: High
Part of Windows XP, not modified in any way.

No indications at Virustotal.com.

No FP when scanning/level is set to medium but nevertheless…

msimn.exe is the executable for Microsoft Outlook Express, the default POP3 email application included with Microsoft Windows. This process should not be removed while you have Outlook Express open.

This would, be a FP.

Hi schakan,

We shall look onto this issue and get back to you after investigation.


File mailed as requested (in mail).

File mailed again (2nd time) 2009-05-18 as requested since the 1st file/mail disappeared.

Hi schakan,

Thanks for your patience. We have fixed the false detection. Please update your AV to db Version 1187 and confirm this,

Thanks and Regards,


Confirmed, the FP has been fixed with db 1187.