Virus from traderji ????

[raosrinivas]

[email protected] The new program !!!!The following softwares are for technical analyses of the st... Mon Aug 20, 2007 2072k


[email protected] Discussion forum for Stocks Commodities & Forex. Mon Aug 20, 2007 2072k

-Apparently-To: [email protected] via 66.196.97.95; Tue, 21 Aug 2007 07:59:47 -0700
X-Originating-IP: [193.110.187.3]
Return-Path: <[email protected]>
Authentication-Results: mta135.mail.re4.yahoo.com from=; domainkeys=neutral (no sig)
Received: from 193.110.187.3 (HELO ttx02.ttx-net.sk) (193.110.187.3) by mta135.mail.re4.yahoo.com with SMTP; Tue, 21 Aug 2007 07:59:46 -0700
Received: (qmail 1362 invoked from network); 21 Aug 2007 14:59:12 -0000
Received: from 124.29.244.42 by ttx02 (envelope-from <[email protected]>, uid 89) with qmail-scanner-1.25st ( Clear:RC:1(124.29.244.42):. Processed in 216.628065 secs); 21 Aug 2007 14:59:12 -0000
X-Qmail-Scanner-Mail-From: [email protected] via ttx02
X-Qmail-Scanner: 1.25st (Clear:RC:1(124.29.244.42):. Processed in 216.628065 secs Process 640)
Received: from unknown (HELO HELO) ([email protected]@124.29.244.42) by mail.ttx-net.sk with ESMTPA; 21 Aug 2007 14:55:35 -0000
From: [email protected] Add to Address Book Add Mobile Alert
Subject: The new program !!!!The following softwares are for technical analyses of the stock
To: [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected]
Content-Type: multipart/mixed; boundary="=_NextPart_2rfkindysadvnqw3nerasdf"
MIME-Version: 1.0
Reply-to: [email protected]
Date: Tue, 21 Aug 2007 00:29:41 +0100
X-Priority: 1
X-Library: Indy 9.00.10
X-Qmail-Scanner-Message-ID: <1187708136894640@ttx02>
Content-Length: 2119769
===========================================================
X-Apparently-To: [email protected] via 66.196.97.99; Mon, 20 Aug 2007 15:19:09 -0700
X-Originating-IP: [193.110.187.3]
Return-Path: <[email protected]>
Authentication-Results: mta568.mail.mud.yahoo.com from=; domainkeys=neutral (no sig)
Received: from 193.110.187.3 (HELO ttx02.ttx-net.sk) (193.110.187.3) by mta568.mail.mud.yahoo.com with SMTP; Mon, 20 Aug 2007 15:19:09 -0700
Received: (qmail 9356 invoked from network); 20 Aug 2007 22:18:56 -0000
Received: from 124.29.244.42 by ttx02 (envelope-from <[email protected]>, uid 89) with qmail-scanner-1.25st ( Clear:RC:1(124.29.244.42):. Processed in 232.987707 secs); 20 Aug 2007 22:18:56 -0000
X-Qmail-Scanner-Mail-From: [email protected] via ttx02
X-Qmail-Scanner: 1.25st (Clear:RC:1(124.29.244.42):. Processed in 232.987707 secs Process 8616)
Received: from unknown (HELO HELO) ([email protected]@124.29.244.42) by mail.ttx-net.sk with ESMTPA; 20 Aug 2007 22:15:03 -0000
From: [email protected] Add to Address Book Add Mobile Alert
Subject: Discussion forum for Stocks Commodities & Forex.
To: [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected]
Content-Type: multipart/mixed; boundary="=_NextPart_2rfkindysadvnqw3nerasdf"
MIME-Version: 1.0
Reply-to: [email protected]
Date: Tue, 21 Aug 2007 00:29:41 +0100
X-Priority: 1
X-Library: Indy 9.00.10
X-Qmail-Scanner-Message-ID: <11876481038948616@ttx02>
Content-Length: 2119768


hi traderji admin .............. i think you can identify the origin of this email ...it is with two different subjects as given in first line .... but file size is same for both

So as i said someone has harvested the email addresses and sent the email, so please do not post email addresses in public forum,

FYI the email originated from

www.peem.sk by looking up 193.110.187.3

http://visualroute.visualware.com/s...14&dtotext=2007/07/04+21:39.14&pg=14&perpg=50

so no problem at the servers of traderji

thanks

 

[Traderji]

The originating IP indicates that the emails are being sent from Slovakia!

 

[renu daga]

hello
modertaor..
even i ahve recived such mail in my emailing address,,[email protected],,,from [email protected] subject as trding sofwtwraes are available in this site,,,

and in bad luck i ahad opened the mail,,,god knows ,,,what was that ,,,why was it sent,,
kindly check this

renu daga

 

[Traderji]

hello
modertaor..
even i ahve recived such mail in my emailing address,,[email protected],,,from [email protected] subject as trding sofwtwraes are available in this site,,,

and in bad luck i ahad opened the mail,,,god knows ,,,what was that ,,,why was it sent,,
kindly check this

renu daga

Hello Renu,

The virus was not sent by Traderji.com! Rather it was a virus sent by someone in Slovakia after spoofing our email address.

Please read this entire thread as it contains answers to your questions.

 

[renu daga]

thanks,,
i got it ,,but my query was ..i had opened the mail thinking it was from ur side,,,, and i dont knwo ,,what may happen to my comp,,

will my ip address get leak..or what?

any idea anyone....
renu daga

 

[raosrinivas]

thanks,,
i got it ,,but my query was ..i had opened the mail thinking it was from ur side,,,, and i dont knwo ,,what may happen to my comp,,

will my ip address get leak..or what?

any idea anyone....
renu daga

renu,

if you have opened just the email you are ok, but if you have run the exe by clicking on the attachment , then i do not know what exactly the attachment has because i did not receive it. precautions are

1. make backup of data

2. if you already have anti-virus then scan your computer otherwise download free anti-virus from www.avast.com and scan your computer

3. download and try to use zonealarm from zonealarm.com free version firewall atleast a few days, because it will prompt if any program from outside(internet) is trying to access your computer and vice versa

keep your fingers crossed, our in-house data recovery expert(ratan) may be salivating, not your day yet ratan

you should be good to go...

 

[Saint]

hmmm......interesting.First time hearing of this in this forum........

 

[amarnath]

Hello Renu,

The virus was not sent by Traderji.com! Rather it was a virus sent by someone in Slovakia after spoofing our email address.

Please read this entire thread as it contains answers to your questions.

Any guess whats their intention in attacking Indian traders specifically ??

 

[swagat86]

thanks,,
i got it ,,but my query was ..i had opened the mail thinking it was from ur side,,,, and i dont knwo ,,what may happen to my comp,,

will my ip address get leak..or what?

any idea anyone....
renu daga

BAckup all data and reformat ur disk, if uv opened the EXE file.

thnaks

 

[amarnath]

BAckup all data and reformat ur disk, if uv opened the EXE file.

thnaks

Yep that only option if don't have HDD clone, better always keep cloned Hard disk for dishaster recovery of partition using tools like Acronis or norton ghost and another stuff i greatly recommend is sandboxie using which u can open files in boxed virtual enviroument and play with virus