Author Topic: Untestable Mail Detected  (Read 11317 times)

0 Members and 1 Guest are viewing this topic.

djdsk8

  • Guest
Untestable Mail Detected
« on: July 24, 2007, 08:10:27 PM »
"avast! Antivirus: Untestable Mail Detected"

Is what I keep getting in my inbox.  Is there anyway to stop this?  Any idea what is causing this?  It seems like the emails always have a large (~2mb) attachment with them.  Also I'm not sure if the email are making to their final destination, although the email says "avast! Action:   Delivered"

djdsk8

  • Guest
Re: Untestable Mail Detected
« Reply #1 on: July 27, 2007, 07:54:11 PM »
Ok I have now tested and the email ARE reaching their destinations.  Still no idea why these warning all of a sudden started coming.  Any guesses would be appreciated :)

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11664
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re: Untestable Mail Detected
« Reply #2 on: July 27, 2007, 09:15:45 PM »
Please try restarting the "avast antivirus" service (Control Panel -> Administrative Tools -> Services).

Thanks
Vlk
If at first you don't succeed, then skydiving's not for you.

djdsk8

  • Guest
Re: Untestable Mail Detected
« Reply #3 on: August 02, 2007, 12:00:00 AM »
Thank you Vlk for the response, you are the most helpful Avast guru I have ever had the pleasure of dealing with.

I had restarted my server a few days ago and have still been receiving the messages.  So today I just restarted the service you suggested and a few minuets later I got another one of the messages :(

mfeodoroff

  • Guest
Re: Untestable Mail Detected
« Reply #4 on: September 21, 2007, 12:44:48 AM »
I get the occassional one of these (one every few days to a week - very low given the volume of mail we process).  Is there an explanation of why it is untestable, so I can try preventing them from occuring?  I'm in two minds as to whether I should allow these to progress through the system or not.

If the untestable email is infected and I let it through, it's probably me who will carry the can!

Cheers,
Mark

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67236
Re: Untestable Mail Detected
« Reply #5 on: September 21, 2007, 03:18:52 AM »
Is there an explanation of why it is untestable
Anything related on avast logs? Any error message from your email program?
The best things in life are free.

mfeodoroff

  • Guest
Re: Untestable Mail Detected
« Reply #6 on: September 21, 2007, 03:39:11 AM »
Nothing in the logs...below is the email (sanitised) from the most recent one:

avast! Antivirus: Untestable Mail Detected
avast! determined that your mail-server hit a message that cannot be scanned for viruses. Message details are bellow. Please note that the message may potentially containa virus.

The message was automatically processed by avast! according to its configurable rules. You may want to check the server-side logs to verify that no error occured.


--------------------------------------------------------------------------------

Message details
 

From:      "xxx"
To:      "yyy"
Cc:      
Bcc:      
Resent-From:   
Resent-To:      

Subject:      WOTW Vol 9, No 4
Sent:      9/20/2007 4:46:35 PM
Message Type:   Inbound

Mail Server:     our exchange server
Received From:   our upstream SMTP server

Untested Items:   

avast! Action:   Delivered
Virus Database:   9/19/2007


If the avast! Action is discarded, the message was destroyed and will never be delivered. If it is moved to 'badmail', it was placed to the badmail directory on the server. From there it can be resent.

--------------------------------------------------------------------------------
 

This message was automatically generated by avast! for SMTP2000.avast! - copyright © 1988-2007 ALWIL Software.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67236
Re: Untestable Mail Detected
« Reply #7 on: September 21, 2007, 03:44:38 AM »
Sorry mfeodoroff, beyond my knowledge... I have to let this to Alwil team...
The best things in life are free.

twilson

  • Guest
Re: Untestable Mail Detected
« Reply #8 on: January 09, 2008, 07:13:31 PM »
Is there an explanation of why it is untestable
Anything related on avast logs? Any error message from your email program?

We have been getting these Untestable Mails the last couple of days. Below is the avast response and below that is the log error

From:      "rvstanley@cox.net" (rvstanley@cox.net)
To:      "Bill K" (SweetOldBill@cox.net), "Bob Collins" (ats@speedyquick.net), "Bruce Ruble" (asu5348@yahoo.com), "Dan @ Home" (dagoldsmith@pennswoods.net), "Dan W." (skan9@yahoo.com), "Dave Timber" (ZcureDave@aol.com), "Dennis Genovese" (dennis.loraine@gmail.com), "Gene" (genebradham@yahoo.com), "Jerry Woolley" (cowboycars@embarqmail.com), "Joe Herring" (jherring@csi.edu), "Kevin" (klegolf@comcast.net), "Rick" (rtrummer@san.rr.com), "Rod" (kauaitank@yahoo.com), "Rod S" (rstromenger@msn.com), "Tony" (boles_anthony@yahoo.com)
Cc:      
Bcc:      
Resent-From:   
Resent-To:      

Subject:      FROM GIRLS GONE WILD - NO FUZZIES
Sent:      1/9/2008 10:02:57 AM
Message Type:   Inbound

Mail Server:     Our Server
Received From:   Our IP

Untested Items:   

avast! Action:   Delivered
Virus Database:   1/8/2008



The logs show this error with event ID 26633 and the description "Cannot get decoded stream contents. Error code is 0x800705AA."

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67236
Re: Untestable Mail Detected
« Reply #9 on: January 09, 2008, 07:34:36 PM »
twilson, is this email legit, I mean, are you expecting it or it is a spam?
The best things in life are free.

twilson

  • Guest
Re: Untestable Mail Detected
« Reply #10 on: January 09, 2008, 08:03:54 PM »
I'm checking with the people that received them, they are currently at lunch. Why would it matter, if it was spam I would want it checked before it was delivered.

Thanks for the quick reply

Tony

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67236
Re: Untestable Mail Detected
« Reply #11 on: January 09, 2008, 09:31:49 PM »
Why would it matter, if it was spam I would want it checked before it was delivered.
I wish that too. Sorry I'm not an expert on Server version...
The best things in life are free.