RE: Malware database

------=_NextPart_000_001B_01CBB687.563141E0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit

Thank you so much for your suggestion. I really appreciate your replies.
Thanks again!


Regards,
Anshuman 


-----Original Message-----
From: David H. Lipman [mailto:[email protected]] 
Sent: Monday, January 17, 2011 8:19 PM
To: Huffen Doback; [email protected]; Anshuman Anil Deshmukh
Subject: Re: Malware database

Anshuman:

I know the tool and I know the author.  I know of its capabilities and I
know what harm it can cause if used improperly or used in the wrong
situation.

It is NOT intended for this kind of use.  It is ONLY intended for guided use
by an assistant in an anti malware forum.  Any other use is contradicted by
the author and may cause harm to one's computer.

As Lawrence Abrams (aka; Grinler) writes...
"Please note that running this program without supervision can cause your
computer to not operate correctly. 
Therefore only run this program at the request of an experienced helper."

You are kindly asked to NOT suggest its use in the future as your suggested
use does not fit the criteria for its intended use.

TIA,
Dave




Date sent:      	Mon, 17 Jan 2011 18:34:42 +0530
From:           	Anshuman Anil Deshmukh <[email protected]>
Subject:        	RE: Malware database
To:             	<[email protected]>, Huffen Doback
<[email protected]>,
	<[email protected]>

> Hi,
> 
> I am assuming here that the user using this tool will go through the 
> help file before he uses Combofix. It requires very basic steps like 
> enabling the system recovery, disabling existing antivirus, etc. If 
> this is not done, the tool warns you with a strict warning which I 
> think every user should read it and understand it. If user doesn't 
> understand this then it is out of my control. It is a basic 
> understanding that user backups the critical information before he 
> executes any tool and the sole responsibility of executing it would be the
users responsibility.
> 
> Just to inform you that I have used this tool on several occasions and 
> I didn't found any issues in it. There was no such occasion where I 
> have seen that this tool has failed and harmed any of the system. All 
> tools specified are not just googled and suggested, but they are used 
> regularly by me and so was the recommendation.
> 
> I hope this clarifies well!
> 
> Regards,
> Anshuman
> 
> 
> -----Original Message-----
> From: David H. Lipman [mailto:[email protected]]
> Sent: Monday, January 17, 2011 6:06 PM
> To: Anshuman Anil Deshmukh
> Subject: Re: Malware database
> 
> No.
> 
> ComboFix is not an anti malware utility that is to be used outside an 
> anti malware forum and without guided assistance by a forum helper.
> 
> I know the author and I know the tool and I know the damage the tool 
> can cause if used improperly or used under certain circumstances.
> 
> Dave
> 
> 
> Date forwarded: 	Mon, 17 Jan 2011 02:23:28 -0700 (MST)
> Date sent:      	Sat, 15 Jan 2011 00:09:18 +0530
> Forwarded by:   	[email protected]
> From:           	Anshuman Anil Deshmukh <[email protected]>
> Subject:        	RE: Malware database
> To:             	Huffen Doback <[email protected]>,
> <[email protected]>
> 
> > Hi Huffen,
> > 
> > Following are my suggesstions-
> > 
> > 1. Kaspersky one of the leading antivirus vendor has a removal tool 
> > which
> is Kaspersky Removal Tool; though size of the tool is bit bulky i.e. 
> Around
> 80 MB. The good part of this tool is that it generates the report of 
> scan in ver detailed manner and let you about each process on the 
> system and has good feature to provide you with suggesstions like 
> making the system more secure like disabling autorun, etc.
> > 
> > 2. GMER tool. Search google and the first site that appears in the 
> > list is
> the one. It scans the system thoroughly and highlights the suspicious 
> file, process in RED. It can detect any rootkit in installed in the 
> system. It has also inbuilt capabilities for executing the registry, 
> command prompt in case the worm has disabled the functionality. Ensure 
> that this tool is executed in safe mode without network option.
> > 
> > 3. COMBOFIX, a program that cleans all types of infections
automatically.
> Even if for some reason if failed can help you to remove malware by 
> giving you a extensive report.
> > 
> > I hope this helps!
> > 
> > Anshuman
> > Sent from Blackberry
> > 
> 
> 
> --
> 
>                                 Mr. David H. Lipman
>                                 [email protected]
>                              Yahoo IM:  david_h_lipman
> 
> 
> 
> 
> 
> "Legal Disclaimer: This electronic message and all contents contain 
> information from Cybage Software Private Limited which may be 
> privileged, confidential, or otherwise protected from disclosure. The 
> information is intended to be for the addressee(s) only. If you are 
> not an addressee, any disclosure, copy, distribution, or use of the 
> contents of this message is strictly prohibited. If you have received 
> this electronic message in error please notify the sender by reply 
> e-mail to and destroy the original mewww.cybage.com
> 




--  

                                Mr. David H. Lipman
                                [email protected]
                             Yahoo IM:  david_h_lipman





"Legal Disclaimer: This electronic message and all contents contain information from Cybage Software Private Limited which may be privileged, confidential, or otherwise protected from disclosure. The information is intended to be for the addressee(s) only. If you are not an addressee, any disclosure, copy, distribution, or use of the contents of this message is strictly prohibited. If you have received this electronic message in error please notify the sender by reply e-mail to and destroy the original message and all copies. Cybage has taken every reasonable precaution to minimize the risk of malicious content in the mail, but is not liable for any damage you may sustain as a result of any malicious content in this e-mail. You should carry out your own malicious content checks before open
 ing the e-mail or attachment." 
www.cybage.com


------=_NextPart_000_001B_01CBB687.563141E0
Content-Type: application/pkcs7-signature;
	name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
	filename="smime.p7s"

MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIK2TCCBDww
ggOloAMCAQICEGZ9Uefn3IiNR4OvKeTazCYwDQYJKoZIhvcNAQEEBQAwaTETMBEGCgmSJomT8ixk
ARkWA2NvbTEWMBQGCgmSJomT8ixkARkWBmN5YmFnZTE6MDgGA1UEAxMxQ2VydGlmaWNhdGUgQXV0
aG9yaXR5IChDeWJhZ2UgU29mdHdhcmUgUHZ0LiBMdGQuKTAeFw0wNjA1MzAxMzEwNThaFw0xMTA1
MzAxMzE4MjZaMGkxEzARBgoJkiaJk/IsZAEZFgNjb20xFjAUBgoJkiaJk/IsZAEZFgZjeWJhZ2Ux
OjA4BgNVBAMTMUNlcnRpZmljYXRlIEF1dGhvcml0eSAoQ3liYWdlIFNvZnR3YXJlIFB2dC4gTHRk
LikwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBALXsiGKQ4bwAQcUtedbCzq848SMXdWE0YuR+
5Kqib7t2xmy5r86bEs54ISUE9eOTbLCP0i7pYpumC4/OphSti6CwSW/16Vo1FKoRmFTlgOoaq6kg
Pg5VxRuI41GWjHIa8ROhUi37I+3LsYckBt7iEPJ7boENa9VRlBuMqrEsRfSvAgMBAAGjggHjMIIB
3zATBgkrBgEEAYI3FAIEBh4EAEMAQTALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNV
HQ4EFgQUj2ddf0gsxgyi9Lq8dZMIoFECltUwggF3BgNVHR8EggFuMIIBajCCAWagggFioIIBXoaB
62xkYXA6Ly8vQ049Q2VydGlmaWNhdGUlMjBBdXRob3JpdHklMjAhMDAyOEN5YmFnZSUyMFNvZnR3
YXJlJTIwUHZ0LiUyMEx0ZC0wMjczMyxDTj13YS1kYy0xLTEsQ049Q0RQLENOPVB1YmxpYyUyMEtl
eSUyMFNlcnZpY2VzLENOPVNlcnZpY2VzLENOPUNvbmZpZ3VyYXRpb24sREM9Y3liYWdlLERDPWNv
bT9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0P2Jhc2U/b2JqZWN0Q2xhc3M9Y1JMRGlzdHJpYnV0
aW9uUG9pbnSGbmh0dHA6Ly93YS1kYy0xLTEuY3liYWdlLmNvbS9DZXJ0RW5yb2xsL0NlcnRpZmlj
YXRlJTIwQXV0aG9yaXR5JTIwITAwMjhDeWJhZ2UlMjBTb2Z0d2FyZSUyMFB2dC4lMjBMdGQuITAw
MjkuY3JsMBAGCSsGAQQBgjcVAQQDAgEAMA0GCSqGSIb3DQEBBAUAA4GBAGdEwoiGhBHmEkpddGRF
8LwSmTkYQZOBnZj5jHChDXfml0ultALwQSa5eeYR3b0N9zSqCy7y9hjfJNI5MtZPywLGdpg+NOho
Uuf/SXOVgKQcNztDNt2XIVeC3NlrBjomontl4U0JkN5vWQHs50j/aK94YSbJw9cbnX8FSpX0k0Dg
MIIGlTCCBf6gAwIBAgIKSv/kbQAAAAAMdDANBgkqhkiG9w0BAQQFADBpMRMwEQYKCZImiZPyLGQB
GRYDY29tMRYwFAYKCZImiZPyLGQBGRYGY3liYWdlMTowOAYDVQQDEzFDZXJ0aWZpY2F0ZSBBdXRo
b3JpdHkgKEN5YmFnZSBTb2Z0d2FyZSBQdnQuIEx0ZC4pMB4XDTEwMTAxMjEwMTQ1NVoXDTExMDUz
MDEzMTgyNlowgYIxEzARBgoJkiaJk/IsZAEZFgNjb20xFjAUBgoJkiaJk/IsZAEZFgZjeWJhZ2Ux
DjAMBgNVBAMTBVVzZXJzMR8wHQYDVQQDExZBbnNodW1hbiBBbmlsIERlc2htdWtoMSIwIAYJKoZI
hvcNAQkBFhNhbnNodW1hbkBjeWJhZ2UuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC4
4F+guoXW5WtVnlqXP0XOq+tzqepZoHKjeZiSr3fJkMteZKa2gxVe55u1DaOYtsDkyuWRf6v0+wj4
FMWRtPiBpoPHebjdnYgqe0eIxejAjWe/aQAHZH/gHAGm6tojC3jPFX3aIfVoiWEySmoQAFT58j12
QfEewltABU/OYgeSxQIDAQABo4IEKDCCBCQwFwYJKwYBBAGCNxQCBAoeCABVAHMAZQByMB0GA1Ud
DgQWBBTN8030duGHiQhM2rrUoEr19x69YDALBgNVHQ8EBAMCBaAwHwYDVR0jBBgwFoAUj2ddf0gs
xgyi9Lq8dZMIoFECltUwggF3BgNVHR8EggFuMIIBajCCAWagggFioIIBXoaB62xkYXA6Ly8vQ049
Q2VydGlmaWNhdGUlMjBBdXRob3JpdHklMjAhMDAyOEN5YmFnZSUyMFNvZnR3YXJlJTIwUHZ0LiUy
MEx0ZC0wMjczMyxDTj1XQS1EQy0xLTEsQ049Q0RQLENOPVB1YmxpYyUyMEtleSUyMFNlcnZpY2Vz
LENOPVNlcnZpY2VzLENOPUNvbmZpZ3VyYXRpb24sREM9Y3liYWdlLERDPWNvbT9jZXJ0aWZpY2F0
ZVJldm9jYXRpb25MaXN0P2Jhc2U/b2JqZWN0Q2xhc3M9Y1JMRGlzdHJpYnV0aW9uUG9pbnSGbmh0
dHA6Ly93YS1kYy0xLTEuY3liYWdlLmNvbS9DZXJ0RW5yb2xsL0NlcnRpZmljYXRlJTIwQXV0aG9y
aXR5JTIwITAwMjhDeWJhZ2UlMjBTb2Z0d2FyZSUyMFB2dC4lMjBMdGQuITAwMjkuY3JsMIIBiQYI
KwYBBQUHAQEEggF7MIIBdzCB4QYIKwYBBQUHMAKGgdRsZGFwOi8vL0NOPUNlcnRpZmljYXRlJTIw
QXV0aG9yaXR5JTIwITAwMjhDeWJhZ2UlMjBTb2Z0d2FyZSUyMFB2dC4lMjBMdGQtMDI3MzMsQ049
QUlBLENOPVB1YmxpYyUyMEtleSUyMFNlcnZpY2VzLENOPVNlcnZpY2VzLENOPUNvbmZpZ3VyYXRp
b24sREM9Y3liYWdlLERDPWNvbT9jQUNlcnRpZmljYXRlP2Jhc2U/b2JqZWN0Q2xhc3M9Y2VydGlm
aWNhdGlvbkF1dGhvcml0eTCBkAYIKwYBBQUHMAKGgYNodHRwOi8vd2EtZGMtMS0xLmN5YmFnZS5j
b20vQ2VydEVucm9sbC9XQS1EQy0xLTEuY3liYWdlLmNvbV9DZXJ0aWZpY2F0ZSUyMEF1dGhvcml0
eSUyMCEwMDI4Q3liYWdlJTIwU29mdHdhcmUlMjBQdnQuJTIwTHRkLiEwMDI5LmNydDApBgNVHSUE
IjAgBgorBgEEAYI3CgMEBggrBgEFBQcDBAYIKwYBBQUHAwIwQwYDVR0RBDwwOqAjBgorBgEEAYI3
FAIDoBUME2Fuc2h1bWFuQGN5YmFnZS5jb22BE2Fuc2h1bWFuQGN5YmFnZS5jb20wRAYJKoZIhvcN
AQkPBDcwNTAOBggqhkiG9w0DAgICAIAwDgYIKoZIhvcNAwQCAgCAMAcGBSsOAwIHMAoGCCqGSIb3
DQMHMA0GCSqGSIb3DQEBBAUAA4GBAD9h+3P5OCtVgTg8CuxGOndNSeZWSLKL+fyhavJNCOh3s605
6lWpu0hLcJchbsA3Y/YfqrM32K/6HrkuNejWMGSuOBnJSa5UE/mjlp/KVFnRidzqvayuRpaG522V
poinsm6ZI+lGvkNZBnl0Cmb/1DKVS4qf562xzsCNnzgO46tiMYIDQDCCAzwCAQEwdzBpMRMwEQYK
CZImiZPyLGQBGRYDY29tMRYwFAYKCZImiZPyLGQBGRYGY3liYWdlMTowOAYDVQQDEzFDZXJ0aWZp
Y2F0ZSBBdXRob3JpdHkgKEN5YmFnZSBTb2Z0d2FyZSBQdnQuIEx0ZC4pAgpK/+RtAAAAAAx0MAkG
BSsOAwIaBQCgggIfMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTEx
MDExNzE1MTQyOVowIwYJKoZIhvcNAQkEMRYEFNLdeThH1uw5XXEWb+ZpOg3jRbnqMIGGBgkrBgEE
AYI3EAQxeTB3MGkxEzARBgoJkiaJk/IsZAEZFgNjb20xFjAUBgoJkiaJk/IsZAEZFgZjeWJhZ2Ux
OjA4BgNVBAMTMUNlcnRpZmljYXRlIEF1dGhvcml0eSAoQ3liYWdlIFNvZnR3YXJlIFB2dC4gTHRk
LikCCkr/5G0AAAAADHQwgYgGCyqGSIb3DQEJEAILMXmgdzBpMRMwEQYKCZImiZPyLGQBGRYDY29t
MRYwFAYKCZImiZPyLGQBGRYGY3liYWdlMTowOAYDVQQDEzFDZXJ0aWZpY2F0ZSBBdXRob3JpdHkg
KEN5YmFnZSBTb2Z0d2FyZSBQdnQuIEx0ZC4pAgpK/+RtAAAAAAx0MIGrBgkqhkiG9w0BCQ8xgZ0w
gZowCwYJYIZIAWUDBAEqMAsGCWCGSAFlAwQBFjAKBggqhkiG9w0DBzALBglghkgBZQMEAQIwDgYI
KoZIhvcNAwICAgCAMAcGBSsOAwIHMA0GCCqGSIb3DQMCAgFAMA0GCCqGSIb3DQMCAgEoMAcGBSsO
AwIaMAsGCWCGSAFlAwQCAzALBglghkgBZQMEAgIwCwYJYIZIAWUDBAIBMA0GCSqGSIb3DQEBAQUA
BIGAcHK1LGhuXiAbaZWZYNoYro5n5OAURLTtA9Q+7Xkfw09l8J41DcmlHNt5Bhx4gCvzVDcessGy
zwFIDBlCWoH6ADSp1pf582VL91brx1o2UPHoaP0Ul0f+9rucJ3wm1tEeQ0Wodyd/u7DMO1pOhZ8v
vsy4UWCcUcTVt1qYJYK0mGYAAAAAAAA=


------=_NextPart_000_001B_01CBB687.563141E0--

__________________________________________________
8O?lW"2aQE;"3,4sH]A?Cb7QSJOd?
http://cn.mail.yahoo.com