_markus Posted February 24, 2015 Report Share Posted February 24, 2015 Hello, Time ago there where some trojaned indicators around that once installed they uploadet all indicators, does anyone remember in which thread? Thanks M- Quote Link to comment Share on other sites More sharing options...
k33 Posted February 24, 2015 Report Share Posted February 24, 2015 (edited) Files by user moranna: piosc, dbdata, marketreplaydata downloader and there was that infamous ofa cracker dll by another guy.. are the ones i remember. These hints should give you some more ideas what to search for, one of the threads with piosc has been pushed up just yesterday, btw. Edited February 24, 2015 by k33 _markus and newbie0101 2 Quote Link to comment Share on other sites More sharing options...
_markus Posted February 24, 2015 Author Report Share Posted February 24, 2015 OK merci! Could you point me to the links? I have a strange feeling a specific vendor is distributing trojaned files Quote Link to comment Share on other sites More sharing options...
_markus Posted February 24, 2015 Author Report Share Posted February 24, 2015 But i am talking about Ninja indicators.. There was some DLL that uploaded all files to a specific location do you remember? Quote Link to comment Share on other sites More sharing options...
k33 Posted February 24, 2015 Report Share Posted February 24, 2015 (edited) I just added to my prior post. I think all of these uploaded private information, but not to what detail. Think admis and some other coding geniuses discovered this, i just warned where malicius files were seemingly spreaded again.. http://indo-investasi.com/showthread.php/20937-P-Osc_NT7/page5 Possible that the replaydata downloader guy and/or some guy who knew in depth how to work an ofa cracker trojan dll on the orig. ofa were behind this. Edited February 24, 2015 by k33 ⭐ ESVepara, newbie0101 and _markus 3 Quote Link to comment Share on other sites More sharing options...
Redbullish Posted February 24, 2015 Report Share Posted February 24, 2015 Check your firewall if you see strange/unusual ip connection when you load the indicators! Quote Link to comment Share on other sites More sharing options...
JoeWilson Posted February 24, 2015 Report Share Posted February 24, 2015 K33, Thanks for the heads up about the potential Virus/Trojan. I updated that post to reflect your warning. Thanks Quote Link to comment Share on other sites More sharing options...
admis Posted February 25, 2015 Report Share Posted February 25, 2015 Hello, Time ago there where some trojaned indicators around that once installed they uploadet all indicators, does anyone remember in which thread? Thanks M- What is the reason you're looking it for? Quote Link to comment Share on other sites More sharing options...
_markus Posted February 25, 2015 Author Report Share Posted February 25, 2015 Hi admis someone took over my trading account (credentials) from AMP, i got notified by AMP, i have a legit ninjatrader license seems like some indicator uploaded data to some strange sharing hoster, and i can remember here time ago there was some indicator that uploaded stuff, if you know which one please let me know Quote Link to comment Share on other sites More sharing options...
admis Posted February 25, 2015 Report Share Posted February 25, 2015 (edited) Hi admis someone took over my trading account (credentials) from AMP, i got notified by AMP, i have a legit ninjatrader license seems like some indicator uploaded data to some strange sharing hoster, and i can remember here time ago there was some indicator that uploaded stuff, if you know which one please let me know I'm sorry. Unfortunately it could happen, because of these malicious files... Your private date (all of the NT users), I mean logins and passwords, are encrypted and stored in the file: Config.xml, located in the folder: C:\Users\...\Documents\NinjaTrader 7\ It's very easy task to decrypt this password into a plain text form. The trojan took (stole) this file and unpload on the private ftp server in Russia (Siberia). So, you know, why I'm angry, when I see those files again... They are really very dangerous. Of course, I'd like to help you if I can. Write to me in PM and describe what you need. /soon I have to go out, but I should be back in few hours.../ Edited February 25, 2015 by admis _markus, ⭐ moneyshare, newbie0101 and 9 others 12 Quote Link to comment Share on other sites More sharing options...
profile Posted February 25, 2015 Report Share Posted February 25, 2015 Markus, I am sorry to hear that someone took over your trading account. Could you share with us which indicators/strategies you suspect that could have led to this? Other people here might have used - or are using - the same indicators/strategies from the same source. newbie0101 1 Quote Link to comment Share on other sites More sharing options...
_markus Posted February 25, 2015 Author Report Share Posted February 25, 2015 hi profile, some indicators and strategys that have been shared in private the files are not on this forum but i think the attack was custom made for me, they wanted some files which they have now, sucks but dont worry you guys are safe profile 1 Quote Link to comment Share on other sites More sharing options...
Traderbeauty Posted February 26, 2015 Report Share Posted February 26, 2015 I highly recommend a program called Trojan killer- I have been using it for a long time and it never let me down. You can find it here: https://thepiratebay.cr/search/trojan-killer/0/3/301 This will take care of trojans that malwarebyte cannot handle. Another very good virus program is superantispyware and you can find it here: https://thepiratebay.cr/search/superantispyware/0/7/301 Another program is called UnhackMe and it should tell you if someone is trying to take over your computer. Hope that helps Jane ⭐ AndyS, casper44, Darktrader and 10 others 13 Quote Link to comment Share on other sites More sharing options...
admis Posted February 26, 2015 Report Share Posted February 26, 2015 I highly recommend a program called Trojan killer- I have been using it for a long time and it never let me down. You can find it here: https://thepiratebay.cr/search/trojan-killer/0/3/301 This will take care of trojans that malwarebyte cannot handle. Another very good virus program is superantispyware and you can find it here: https://thepiratebay.cr/search/superantispyware/0/7/301 Another program is called UnhackMe and it should tell you if someone is trying to take over your computer. Hope that helps Jane Jane, have you tried those tools whether they can detect a threat in the mentioned earlier, the malicious files? I don't think they can... Quote Link to comment Share on other sites More sharing options...
_markus Posted February 26, 2015 Author Report Share Posted February 26, 2015 Jane, have you tried those tools whether they can detect a threat in the mentioned earlier, the malicious files? I don't think they can... of course not :) btw they tried to reconnect from venezuela now Quote Link to comment Share on other sites More sharing options...
Traderbeauty Posted February 26, 2015 Report Share Posted February 26, 2015 Jane, have you tried those tools whether they can detect a threat in the mentioned earlier, the malicious files? I don't think they can... I use AVG as a main - i also have the microsoft ( comes with the computer- forgot the name lol ) , on top of that i use malwarebyte - which in my opinion is the best and once in awhile i run the trojan killer just to make sure none got through the cracks. I dont take chances... Quote Link to comment Share on other sites More sharing options...
admis Posted February 26, 2015 Report Share Posted February 26, 2015 (edited) I use AVG as a main - i also have the microsoft ( comes with the computer- forgot the name lol ) , on top of that i use malwarebyte - which in my opinion is the best and once in awhile i run the trojan killer just to make sure none got through the cracks. I dont take chances... Probably you are losing half of the power of your CPU... ;) I use only Vipre and when I find something strange in the computer behaviour - SmartSniff made by Nirsoft.net - to track down the whole network transfer to and from. I've installed for testing purposes (only on a few computers) the 360totalsecurity. Product is made in China (!). It's absolutely free and for now (since few months) it works very well especially for a computer novice. I suppose, you though about the Microsoft Security Essentials, which is free and in the most cases absolutely enough. Edited February 26, 2015 by admis ⭐ flipper26, profile, yamantaka and 1 other 4 Quote Link to comment Share on other sites More sharing options...
Traderbeauty Posted February 26, 2015 Report Share Posted February 26, 2015 Probably you are losing half of the power of your CPU... ;) I use only Vipre and when I find something strange in the computer behaviour - SmartSniff made by Nirsoft.net - to track down the whole network transfer to and from. I've installed for testing purpuses (only on a few computers) the 360totalsecurity. Product is made in China (!). It's absolutely free and for now (since few months) it works very well especially for a computer novice. I suppose, you though about the Microsoft Security Essentials, which is free and in the most cases absolutely enough. i have a dell xps 8700 with an intel i-7 and 12 gig ram so no matter what it works very well unless i run few charts with j-signal calculating on each tick lol. actively i only have the malwarebyte and the avg- but once in a blue moon i like to run the rest of them just to clean the slate. would love to check your software recommendations- can you please post links to their main site ? Thanks Jane Quote Link to comment Share on other sites More sharing options...
admis Posted February 26, 2015 Report Share Posted February 26, 2015 i have a dell xps 8700 with an intel i-7 and 12 gig ram so no matter what it works very well unless i run few charts with j-signal calculating on each tick lol. actively i only have the malwarebyte and the avg- but once in a blue moon i like to run the rest of them just to clean the slate. would love to check your software recommendations- can you please post links to their main site ? Thanks Jane Ad. PC: One word: Superb! http://www.dell.com/us/p/xps-8700/pd?oc=fdcwgs107h&model_id=xps-8700 http://www.cpubenchmark.net/cpu.php?cpu=Intel+Core+i7-4790K+%40+4.00GHz&id=2275 Ad.2 http://vipreantivirus.com/ http://nirsoft.net/utils/smsniff.html http://360safe.com http://www.360totalsecurity.com/ or http://360safe.com/internet-security.html yamantaka, Traderbeauty, ⭐ ESVepara and 4 others 7 Quote Link to comment Share on other sites More sharing options...
Traderbeauty Posted February 26, 2015 Report Share Posted February 26, 2015 Thanks admis- I always love to test a new software- will check them all. Another very good (imho) software i really like is Advanced System Care but only version 8. You can get it there in 2 seconds: https://thepiratebay.cr/search/Advanced-System-Care-8/0/3/301 In previous versions they use to be very intrusive but not any more- very very good program. Use it, use the scan and also check every option in the toolbar ( the pro is giving you everything for free). Hope that helps Jane admis, ⭐ goldeneagle1, ⭐ ESVepara and 3 others 6 Quote Link to comment Share on other sites More sharing options...
yamantaka Posted February 27, 2015 Report Share Posted February 27, 2015 Probably you are losing half of the power of your CPU... ;) I use only Vipre and when I find something strange in the computer behaviour - SmartSniff made by Nirsoft.net - to track down the whole network transfer to and from. I've installed for testing purposes (only on a few computers) the 360totalsecurity. Product is made in China (!). It's absolutely free and for now (since few months) it works very well especially for a computer novice. I suppose, you though about the Microsoft Security Essentials, which is free and in the most cases absolutely enough. Do you know if Avast and MS Security Essentials slow down the pc any more than vipre? I've always wondered if my machine is getting bogged down with these other anti virus programs. profile 1 Quote Link to comment Share on other sites More sharing options...
ninZa Posted February 27, 2015 Report Share Posted February 27, 2015 Just read through this thread. Realized Market Replay Data Downloader is also mentioned here, so I have uninstalled this tool immediately. Hope my indicators have not been stolen :O Thanks for the info. Pi Quote Link to comment Share on other sites More sharing options...
admis Posted February 27, 2015 Report Share Posted February 27, 2015 (edited) Just read through this thread. Realized Market Replay Data Downloader is also mentioned here, so I have uninstalled this tool immediately. Hope my indicators have not been stolen :O Thanks for the info. Pi Too late. let's better change your passwords on live account(s). You're programmer, so you should know for sure what this malicious addon did. Certainly, you could find your indies close to Chelyabinsk in Ru. Edited February 27, 2015 by admis profile 1 Quote Link to comment Share on other sites More sharing options...
admis Posted February 27, 2015 Report Share Posted February 27, 2015 Do you know if Avast and MS Security Essentials slow down the pc any more than vipre? I've always wondered if my machine is getting bogged down with these other anti virus programs. As I wrote, MS Essentials is quite good, for sure not slownig down your PC too much. Avast, it is also free. I just don't like it. Many times bothered me at work... profile 1 Quote Link to comment Share on other sites More sharing options...
profile Posted February 27, 2015 Report Share Posted February 27, 2015 The Market Replay data downloader mentioned here was a program made available here at II. Is the program offered at http://marketreplaydata.com from the same source? In other words: If you downloaded data from http://marketreplaydata.com, do you run the same risk? Or is http://marketreplaydata.com somethign totally different? Regarding antivirus, antimalware and similar: I have installed the Crypto Prevent from http://www.foolishit.com/vb6-projects/cryptoprevent/ due to a lot of publicity some time ago about possible ransomware. It seems this tool does not affect performance or memory usage and offers unique protection for ransonware alikes. Traderbeauty, admis, exp48967 and 1 other 4 Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.