Here is the problem: MIME-Version: 1.0 Content-transfer-encoding: quoted-printable MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit
The headers are stating 2 different encodings, but only one is allowed. From the AM Manual: Conflicting Encoding Vulnerability: This vulnerability occurs when the headers of an E-mail claim that two or more different encoding types are used. A MIME segment can only be encoded in one way, so if there are more than one encoding types listed, it is possible that the mail server virus scanner and the mail client will use different decoding methods on the E-mail. If this happens, a virus could bypass virus scanning on the mail server. -----Original Message----- From: "Brian Thomforde" <[email protected]> Sent: Tuesday, January 27, 2015 8:43am To: [email protected] Subject: [MBF] FW: Declude Virus caught a virus I have an email user that has a website with a "Contact Us" form that when sent to her I always get this Virus notice. I really doubt it is a virus, what can I do to get these emails delivered? Brian Thomforde http://www.truckdriver.com "Smarter Drivers...Better Jobs" Providing excellence in Internet recruiting since 1996 763-444-8998 x201 Declude Virus v4.12.05 caught the [Conflicting Encoding Vulnerability] virus in Unknown File from [email protected] to: [email protected]. Date: 27 Jan 2015 09:07:14 Subject: [Fabulous Flax Seed] Contact from Kim Hintermeister Spool File: 663202460779.eml Remote IP: 173.199.152.64 Headers: Return-Path: <[email protected]> Received: from server.launchhostingserver.com (UnknownHost [173.199.152.64]) by mail.truckdriver.com with SMTP; Tue, 27 Jan 2015 09:07:08 -0700 Received: from flaxcraft by server.launchhostingserver.com with local (Exim 4.84) (envelope-from <[email protected]>) id 1YG814-0006LC-Vx for [email protected]; Tue, 27 Jan 2015 09:25:22 -0600 To: [email protected] Subject: [Fabulous Flax Seed] Contact from Kim Hintermeister X-PHP-Script: fabulousflaxseed.com/index.php for 97.88.30.12 Date: Tue, 27 Jan 2015 15:25:22 +0000 From: WordPress <[email protected]> Message-ID: <[email protected]> X-Priority: 3 X-Mailer: PHPMailer 5.2.7 (https://github.com/PHPMailer/PHPMailer/) Reply-To: [email protected] MIME-Version: 1.0 Content-transfer-encoding: quoted-printable MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - server.launchhostingserver.com X-AntiAbuse: Original Domain - fabulousflaxseed.com X-AntiAbuse: Originator/Caller UID/GID - [508 32003] / [47 12] X-AntiAbuse: Sender Address Domain - server.launchhostingserver.com X-Get-Message-Sender-Via: server.launchhostingserver.com: authenticated_id: flaxcraft/from_h X-Source: X-Source-Args: X-Source-Dir: ############################################################# This message is sent to you because you are subscribed to the mailing list <[email protected]>. To unsubscribe, E-mail to: <[email protected]> To switch to the DIGEST mode, E-mail to <[email protected]> To switch to the INDEX mode, E-mail to <[email protected]> Send administrative queries to <[email protected]> ############################################################# This message is sent to you because you are subscribed to the mailing list <[email protected]>. To unsubscribe, E-mail to: <[email protected]> To switch to the DIGEST mode, E-mail to <[email protected]> To switch to the INDEX mode, E-mail to <[email protected]> Send administrative queries to <[email protected]>
