Entourage Email Connecting to ldap.yahoo.com Virus or Trojan?

Hi -g,

Check to see if something has been added to your Entourage account. In Entourage, open your Account Settings. Double click your account to edit it. Under the Sending mail section, is there anything in the "Domain for unqualified addresses:" that shouldn't be there?

Is it actually Entourage trying to send mail, or just a system message saying that it can't connect to a particular server? Try looking in the System Preferences under the Network settings. Locate the DNS section and see if there are any IP addresses listed that shouldn't be there. If there are, remove them.

The message is displaying in the very bottom-right corner of Entourage alongside a horizontal blue & white barbershop pole status bar.

Being right in the Entourage window, then it must be being run directly in Entourage, not through some unknown DNS link of the OS.

With nothing in your Outgoing or Drafts folders, I can't think what could be causing Entourage to be sending something out. Although it could be trying to pull something in. Check the "Microsoft News Server" folder for any entries. It could be push data coming from a newsgroup server.

Putting ldap.yahoo.com into Google returns various results. Essentially, it's a known protocol. Here's one link explaining what on Idap is.

http://www.grennan.com/ldap-HOWTO.html

More on it here at Microsoft's web site.

Ah, here we go. Open Entourage's Help and type in ldap. One page it returns in Office 2008 is this:

About directory services
Entourage uses Lightweight Directory Access Protocol (LDAP) to provide directory services — search tools that you can use to look up names and e-mail addresses on the Internet. For example, if you want to send a message but you do not have the e-mail address, you can search for the address in a directory service. You can then send a message to an address that you find or add the address to your address book.

One of the other help pages shows you how to set up a directory service in your email account. It seems all you should need to do is open the Account Settings. Click on the Directory Service tab and remove any entries that may be there.

You're welcome, -g. I was wondering that myself later in the day yesterday. How did those entries get there in the first place? Maybe an attachment that looked like it was a .jpg or other file, but was actually an AppleScript?

I can confirm that they are not there by default as I own several macs with Entourage installed and only my wife's was affected. Thanks to this thread I was able to rid my wife's MacBook Pro of this annoying problem. How the servers ended up in her Directory Services is anyone's guess. Thanks for the help.

Message was edited by: xmac

Message was edited by: xmac