This has been discussed on the sanesecurity list:
http://search.gmane.org/?query=MBL_144360.UNOFFICIAL&author=&group=gmane.comp.security.virus.clamav.sanesecurity&sort=relevance&DEFAULTOP=and&xP=mbl_144360&xFILTERS=Gcomp.security.virus.clamav.sanesecurity---A
This post in particular describe how to disable it:
http://article.gmane.org/gmane.comp.security.virus.clamav.sanesecurity/3091/match=mbl_144360+unofficial
I expect that Bill Landry (author of the scripts we're using) will be
taking measures to fix this automatically, and keep it from happening in
the future. Stay tuned.
--
-Eric 'shubes'
On 03/05/2011 03:21 AM, Amit wrote:
Even normal mails are now getting bounced. Please find below mail error:
Your message did not reach some or all of the intended recipients.
Subject: RE: [qmailtoaster] ClamAV Unofficial Virus
Sent: 3/4/2011 3:49 PM
The following recipient(s) cannot be reached:
'qmailtoaster-list@qmailtoaster.com' on 3/4/2011 3:49 PM
554 Your email was rejected because it contains the
MBL_144360.UNOFFICIAL virus
*Amit Dalia**
*
Join Us: cid:image001.png@01CBA820.E533FB00
<http://www.facebook.com/IKFPune>cid:image002.png@01CBA820.E533FB00
<http://in.linkedin.com/in/ikfpune>cid:image003.png@01CBA820.E533FB00
<http://twitter.com/ikfpune>cid:image004.png@01CBA820.E533FB00
<http://maps.google.co.in/maps?oe=utf-8&client=firefox-a&ie=UTF8&q=ikf+pune&fb=1&gl=in&hq=ikf&hnear=Pune,+Maharashtra&hl=en&view=map&cid=14479258856253150229&iwloc=A&ved=0CBoQpQY&sa=X&ei=jOwVTe_gJqngyQTAssjeCg>cid:image005.png@01CBA820.E533FB00
<http://ikf-pune.blogspot.com/>
*From:*Pak Ogah [mailto:pako...@pala.bo-tak.info]
*Sent:* Friday, March 04, 2011 3:18 PM
*To:* qmailtoaster-list@qmailtoaster.com
*Subject:* Re: [qmailtoaster] ClamAV Unofficial Virus
On 04-Mar-11 15:11, Amit wrote:
Hi Everyone,
Don’t know whether anyone got error or not but today suddenly many of
the attachment mails started getting bounced with below error:
Technical details of permanent failure:
Google tried to deliver your message, but it was rejected by the
recipient domain. We recommend contacting the other email provider for
further information about the cause of this error. The error that the
other server returned was: 554 554 Your email was rejected because it
contains *the MBL_144360.UNOFFICIAL virus* (state 18).
General attachments for which users are getting mail bounce are like
.doc, .xls, .dat, .ppt.
Mails are getting bounced for both incoming and outgoing mails.
*Amit Dalia**
*
Join Us: cid:image001.png@01CBA820.E533FB00
<http://www.facebook.com/IKFPune> cid:image002.png@01CBA820.E533FB00
<http://in.linkedin.com/in/ikfpune> cid:image003.png@01CBA820.E533FB00
<http://twitter.com/ikfpune> cid:image004.png@01CBA820.E533FB00
<http://maps.google.co.in/maps?oe=utf-8&client=firefox-a&ie=UTF8&q=ikf+pune&fb=1&gl=in&hq=ikf&hnear=Pune,+Maharashtra&hl=en&view=map&cid=14479258856253150229&iwloc=A&ved=0CBoQpQY&sa=X&ei=jOwVTe_gJqngyQTAssjeCg>
cid:image005.png@01CBA820.E533FB00 <http://ikf-pune.blogspot.com/>
are you adding SaneSecurity unofficial clamav defition ? if so the
message could be generated by SaneSecurity definition
---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
