The GW-Info list is a discussion list, which can be very active with many messages per day. Any subscriber of the GW-Info list has the ability to post on-topic messages.

From:

 "Peter Beasley" <pjbeasley23@gmail.com>

Subject:

 Re: Have you received a warning about spam from GW List

Date:

 Tue, Nov 15, 2011 6:13:49 am
This is a multi-part message in MIME format.

------=_NextPart_000_0070_01CCA387.A64BF510
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

I received one of those.
----- Original Message -----
From: RicksPlace
To: GW Micro Product Discussion Listserv
Sent: Tuesday, November 15, 2011 11:02 AM
Subject: Have you received a warning about spam from GW List


I have a e-mail in my inbox from GW:
The contents are:
Your mail 202.40.187.2:1472->184.18.147.3:25 contains contaminated file _From__Mail_Delivery_Subsystem___postmaster_gwmicro.com___Date_15_Nov_2011_09:51:35__Subj____SPAM_detected_in_Finance.gov.bd____Mail_System_Error___Retur_/gwmicro.com.zip/gwmicro.com
with virus Email-Worm.Win32.Mydoom.m,so it is dropped.
If you reply to this message it will be delivered to the original sender only. If
....
Has anyone else seen this spam message from GW?
Who is (Finance.gov> and should we let them know they are infected?
Rick USA


__________ Information from ESET NOD32 Antivirus, version of virus signature database 6630 (20111115) __________

The message was checked by ESET NOD32 Antivirus.

http://www.eset.com



__________ Information from ESET NOD32 Antivirus, version of virus signature database 6630 (20111115) __________

The message was checked by ESET NOD32 Antivirus.

http://www.eset.com


If you reply to this message it will be delivered to the original sender only. If your reply would benefit others on the list and your message is related to GW Micro, then please consider sending your message to gw-info@gwmicro.com so the entire list will receive it.

GW-Info messages are archived at http://www.gwmicro.com/gwinfo. You can manage your list subscription at http://www.gwmicro.com/listserv.
------=_NextPart_000_0070_01CCA387.A64BF510
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.6000.16608" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>I received one of those.</FONT></DIV>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=ofbgmail@mi.rr.com href="mailto:ofbgmail@mi.rr.com">RicksPlace</A>
</DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A title=gw-info@gwmicro.com
href="mailto:gw-info@gwmicro.com">GW Micro Product Discussion Listserv</A>
</DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Tuesday, November 15, 2011 11:02
AM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> Have you received a warning
about spam from GW List</DIV>
<DIV><BR></DIV>
<DIV><FONT face=Arial size=2>I have a e-mail in my inbox from GW:</FONT></DIV>
<DIV><FONT face=Arial size=2>The contents are:</FONT></DIV>
<DIV><FONT face=Arial size=2>Your mail 202.40.187.2:1472-&gt;184.18.147.3:25
contains contaminated file
_From__Mail_Delivery_Subsystem___postmaster_gwmicro.com___Date_15_Nov_2011_09:51:35__Subj____SPAM_detected_in_Finance.gov.bd____Mail_System_Error___Retur_/gwmicro.com.zip/gwmicro.com<BR>with
virus Email-Worm.Win32.Mydoom.m,so it is dropped.<BR>If you reply to this
message it will be delivered to the original sender only. If</FONT></DIV>
<DIV><FONT face=Arial size=2>....</FONT></DIV>
<DIV><FONT face=Arial size=2>Has anyone else seen this&nbsp; spam message from
GW?</FONT></DIV>
<DIV><FONT face=Arial size=2>Who is (Finance.gov&gt; and should we let them
know they are infected?</FONT></DIV>
<DIV><FONT face=Arial size=2>Rick USA</FONT></DIV><BR><BR>__________
Information from ESET NOD32 Antivirus, version of virus signature database
6630 (20111115) __________<BR><BR>The message was checked by ESET NOD32
Antivirus.<BR><BR><A
href="http://www.eset.com">http://www.eset.com</A><BR></BLOCKQUOTE></BODY></HTML>;

------=_NextPart_000_0070_01CCA387.A64BF510--