Link to home
Start Free TrialLog in
Avatar of jahhan
jahhan

asked on

RIM_bca28a80-e9c0-11d1-87fe-00600811c6a2 emails being received in Outlook

I have a user that receive corporate email within Outlook 2003.  The employee is consistently receiving RIM_bca28a80-e9c0-11d1-87fe-00600811c6a2 messages in the Outlook inbox.  My organization supports BES for Exchange services; however, this user is not configured with a BES account.  The user has stated they do not own a BB device, nor do they have the BB Desktop Manager installed on their workstation.  Could someone explain to me why this user would suddenly start to receive these messages, and what are the steps to resolve this issue.
ASKER CERTIFIED SOLUTION
Avatar of Mkris9
Mkris9
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of jahhan
jahhan

ASKER

According to the user they never owned a BB device, and they never installed the desktop manager on their desktop.  This week they all of a sudden started receiving these messages.
can you open the message in Outlook with
RIM_bca28a80-e9c0-11d1-87fe-00600811c6a2

Go to view > options

copy paste the contents of the header

Check Message-ID: after @sign
Check the IP address

Verify if the user is getting a spoofed message.
Avatar of jahhan

ASKER

The Message-ID field (after @ sign ) reads @smtp.eu.blackberry.net

The original sender field reads network@etp2116.etp.eu.blackberry.net
The original IP address reads 93.186.17.11
Are you guys in UK ?
This is RIM IP block in Europe

http://www.maxmind.com/app/locate_demo_ip?ips=93.186.17.11

Was there anything else in the email / link / virus / any other payload.
The other thing to think of is if another user has a rule to forward all their incoming mail to this user or a forward on their mailbox... Then if a blackberry is trying to activate on the 1st mailbox all the activation messages will end up in the 2nd mailbox...
Avatar of jahhan

ASKER

the user with the issue is in Europe.  I'm reviewing the internet header and there is nothing to indicate spam.  I was thinking the issue was related to an exchange rule created by another mailbox owner, but the internet header would have indicated the original mailbox.