Avast WEBforum
Business Products => Archive (Legacy) => Avast Business => Avast Server Protection => Topic started by: djdsk8 on July 24, 2007, 08:10:27 PM
-
"avast! Antivirus: Untestable Mail Detected"
Is what I keep getting in my inbox. Is there anyway to stop this? Any idea what is causing this? It seems like the emails always have a large (~2mb) attachment with them. Also I'm not sure if the email are making to their final destination, although the email says "avast! Action: Delivered"
-
Ok I have now tested and the email ARE reaching their destinations. Still no idea why these warning all of a sudden started coming. Any guesses would be appreciated :)
-
Please try restarting the "avast antivirus" service (Control Panel -> Administrative Tools -> Services).
Thanks
Vlk
-
Thank you Vlk for the response, you are the most helpful Avast guru I have ever had the pleasure of dealing with.
I had restarted my server a few days ago and have still been receiving the messages. So today I just restarted the service you suggested and a few minuets later I got another one of the messages :(
-
I get the occassional one of these (one every few days to a week - very low given the volume of mail we process). Is there an explanation of why it is untestable, so I can try preventing them from occuring? I'm in two minds as to whether I should allow these to progress through the system or not.
If the untestable email is infected and I let it through, it's probably me who will carry the can!
Cheers,
Mark
-
Is there an explanation of why it is untestable
Anything related on avast logs? Any error message from your email program?
-
Nothing in the logs...below is the email (sanitised) from the most recent one:
avast! Antivirus: Untestable Mail Detected
avast! determined that your mail-server hit a message that cannot be scanned for viruses. Message details are bellow. Please note that the message may potentially containa virus.
The message was automatically processed by avast! according to its configurable rules. You may want to check the server-side logs to verify that no error occured.
--------------------------------------------------------------------------------
Message details
From: "xxx"
To: "yyy"
Cc:
Bcc:
Resent-From:
Resent-To:
Subject: WOTW Vol 9, No 4
Sent: 9/20/2007 4:46:35 PM
Message Type: Inbound
Mail Server: our exchange server
Received From: our upstream SMTP server
Untested Items:
avast! Action: Delivered
Virus Database: 9/19/2007
If the avast! Action is discarded, the message was destroyed and will never be delivered. If it is moved to 'badmail', it was placed to the badmail directory on the server. From there it can be resent.
--------------------------------------------------------------------------------
This message was automatically generated by avast! for SMTP2000.avast! - copyright © 1988-2007 ALWIL Software.
-
Sorry mfeodoroff, beyond my knowledge... I have to let this to Alwil team...
-
Is there an explanation of why it is untestable
Anything related on avast logs? Any error message from your email program?
We have been getting these Untestable Mails the last couple of days. Below is the avast response and below that is the log error
From: "rvstanley@cox.net" (rvstanley@cox.net)
To: "Bill K" (SweetOldBill@cox.net), "Bob Collins" (ats@speedyquick.net), "Bruce Ruble" (asu5348@yahoo.com), "Dan @ Home" (dagoldsmith@pennswoods.net), "Dan W." (skan9@yahoo.com), "Dave Timber" (ZcureDave@aol.com), "Dennis Genovese" (dennis.loraine@gmail.com), "Gene" (genebradham@yahoo.com), "Jerry Woolley" (cowboycars@embarqmail.com), "Joe Herring" (jherring@csi.edu), "Kevin" (klegolf@comcast.net), "Rick" (rtrummer@san.rr.com), "Rod" (kauaitank@yahoo.com), "Rod S" (rstromenger@msn.com), "Tony" (boles_anthony@yahoo.com)
Cc:
Bcc:
Resent-From:
Resent-To:
Subject: FROM GIRLS GONE WILD - NO FUZZIES
Sent: 1/9/2008 10:02:57 AM
Message Type: Inbound
Mail Server: Our Server
Received From: Our IP
Untested Items:
avast! Action: Delivered
Virus Database: 1/8/2008
The logs show this error with event ID 26633 and the description "Cannot get decoded stream contents. Error code is 0x800705AA."
-
twilson, is this email legit, I mean, are you expecting it or it is a spam?
-
I'm checking with the people that received them, they are currently at lunch. Why would it matter, if it was spam I would want it checked before it was delivered.
Thanks for the quick reply
Tony
-
Why would it matter, if it was spam I would want it checked before it was delivered.
I wish that too. Sorry I'm not an expert on Server version...