Second incident on 21st June 2006 : buyingusedcar.net

Summary : someone modified contact details of a domain buyingusedcar.net [which was not mine]. Modified contact detail was mine. Motivation of the person who did it was ugly beyond doubt. But what may be the motivation? Possibly

1. Fabrication or

2. Attempt to gain password of my GoDaddy account. I have already indicated that employer was involved in it.After mail came from GoDaddy if I would have checked my account possibly IT could have grabbed my password. But why domain account? I had made known to many people including Prasanna that I had started getting significant money from domains. I had also told Amith that I might quit my job and do full time domain business. I think this incident is related to it. Next 2 incident also points in this direction.

whatever might be the case the guy responsible for this should be questioned to get right data.

------------------------------------------------------------------------------------------
1.1 ON 21th June 2006. A domain buyingusedcar.net Administrative Contact [Appendix 10] - was modified to my name and email address. When I contacted registrar Godaddy.com and copied the mail to registrant

docreilly@yahoo.com

The person replied the mail, docreilly@yahoo.com had denied that any such thing had happened after modifying Administrative contact back to his name.[Appendix 20]. Godaddy has provided some guidance regarding how to get private information about account holder.[Appendix 30] . The owner should be grilled to tell who asked him/her to change the data the same person must had supplied my address etc.

Note : Also, soon after I mailed docreilly@yahoo.com whois of buyingusedcar.com changed to privacy services. This evidence has a possible name which in turn can give clue hence should be taken seriously and not as just another electronic crime.

1.1.1 Also, to note earlier in May there was Godaddy notification for same domain about Registrar transfer of byingusedcar.net. At that time too I had contacted owner and reported it to Godaddy. At that time I assumed it mistake. Someone by mistake can’t know my name and address and with Appendix 20 it was act of hiding the data shows malicious intent of this event.

1.2 06-23-2006, I posted info about someone tried to access my PC from Bluetooth device. I was trying to write about events happening in domainworld.I was using bootable Knoppix based Linux and Wirless radio of laptop was switched off.

Refer .\anjan.txt [TO DO - Upload this file somewhere]

It implies at that time my PC was under someone control and at least one of my neighbor premises was used for this as Bluetooth's range is limited.

APPENDIX 10

	from		"support@godaddy.com"		hide details	6/21/06
	reply-to			support@godaddy.com
	to			anjan@anjan.org
	date			20 Jun 2006 15:15:57 -0700
	subject			DOMAIN CONTACT UPDATE
Dear Anjan Bhushan, Changes to your registrant and/or administrative contact information have been initiated for the domain name(s) listed below: BUYINGUSEDCAR.NET You *do not* need to respond to this email. If, however, you think these changes may have been made in error or fraudulently, please contact us within 15 days at mailto:support@godaddy.com. Sincerely, GoDaddy.com - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Copyright 2006 GoDaddy.com. All rights reserved.

Whois detail corresponding to above mail

Registrant:
Web Rodeo, Inc.
5710 turtle lake road
shoreview, Minnesota 55126
United States

Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)
Domain Name: BUYINGUSEDCAR.NET
Created on: 24-Jul-02
Expires on: 24-Jul-07
Last Updated on: 20-May-06

Administrative Contact:
Bhushan, Anjan anjan@anjan.org
35$ or bestoffer http://www.bestshop.org/domains/
7 Tulip dr., Apt# 1g, 08863

+1.7322253302 Fax --

Technical Contact:
Reilly, Kevin docreilly@yahoo.com
Web Rodeo, Inc.
5710 turtle lake road
shoreview, Minnesota 55126
United States
6122706532 Fax --

Domain servers in listed order:
HEIDI.GOOKLE.NET
PAMELA.GOOKLE.NET

APPENDIX 20

Kevin Reilly		hide details	6/21/06
	reply-to			Kevin Reilly
	to			Anjan Bhushan
	date			Jun 21, 2006 4:44 AM
	subject			Re: DOMAIN CONTACT UPDATE
	mailed-by			yahoo.com
i dont know how you are getting these e-mails? here is the who is info for the domain. Registrant: Web Rodeo, Inc. 5710 turtle lake road shoreview, Minnesota 55126 United States Registered through: GoDaddy.com, Inc. (http://www.godaddy.com) Domain Name: BUYINGUSEDCAR.NET Created on: 24-Jul-02 Expires on: 24-Jul-07 Last Updated on: 20-May-06 Administrative Contact: Reilly, Kevin docreilly@yahoo.com Web Rodeo, Inc. 5710 turtle lake road shoreview, Minnesota 55126 United States 6122706532 Technical Contact: Reilly, Kevin docreilly@yahoo.com Web Rodeo, Inc. 5710 turtle lake road shoreview, Minnesota 55126 United States 6122706532 Domain servers in listed order: HEIDI.GOOKLE.NET PAMELA.GOOKLE.NET

APPENDIX 3O

Update [Incident ID: 741946] - Re: DOMAIN CONTACT UPDATE Inbox

						Reply Reply to all Forward Print Add support@supportwebsite.com to Contacts list Delete this message Report phishing Show original Message text garbled?
		"support@supportwebsite.com"	to me	show details	6/22/06

Images are not displayed. Display images below - Always display images from support@supportwebsite.com

Our support staff has responded to your request, details of which are described below: Discussion Notes Support Staff Response Dear Anjan, Thank you for your reply. Due to confidentiality, we are not able to release information about our customer's accounts. If you would like to file a formal subpoena to attempt to have this information released, you may find our policy and where to submit by clicking here. Please let us know if we can help you in any other way. Kindest Regards, Ashley P Customer Support Supervisor Customer Inquiry You are talking about WIPO laws I am talking about electronic crime. It sounds to me a possible case of obstruction to justice. However, I will reserve my comments till I am duly adviced. On 20 Jun 2006 22:40:09 -0700, support@supportwebsite.com < If you need further assistance with this matter, please reply to this email or contact customer service at (480) 505-8877 and reference [Incident ID: 741946]. Thanks, GoDaddy.com © 2006 GoDaddy.com. All rights reserved.

Fishy Apartment Inspection Notice - Images

Fishy Apartment Inspection Notice

1. After being victimized in 2005 and I did place 2 Creative video cam connected with PC. These cams had special feature that it can record a video for 30 seconds each time cam detects some motion. After buying it told that to Upendra ji which was somehow captured by mafia as well.[see From Upendra ji to Sudhaker's place.]

Although, hadn’t used these device beyond 2 weeks, this could be possible reason for the notice delivered in June 2006. Refer Next post of images of notice.

§ As per notices inspection take place after every 5 years.

§ 2004 notice had an inspection date and time Friday July 2 starting 8 AM.

§ If above inspection took place there was no meaning of 2006 inspection
§ If 2004 inspection didn’t happen on July 2, 5 year period means Inspection should had been rescheduled in 2004 itself.

§ There is a possibility that 2006 notice was made to enter apartment and bug apartment/computers or similar reason. This should be thoroughly investigated.

Ebay userid which I didn't create

Malafide action – creating ebay user ID- On 4^th August 2005 received some email
from ebay that was send to ebay user. I was astonished by it and using eBay form submitted a request for finding out more. eBay sends username against email address .Refer Appendix 1100.Somone had created an ebay userid using my email. Creation of an ebay user id also needs access to the email.

I don’t know intention of user probably they wanted to sell something using my
name. It is clear that they had complete access of email anjan_bhushan[at]yahoo.com

APPENDIX 1100

This message is not flagged. [ Flag Message - Mark as Unread ]

Date:	Thu, 4 Aug 2005 20:48:01 -0700
From:	aw-confirm@ebay.com Add to Address Book Add Mobile Alert
To:	Anjan_bhushan@yahoo.com
Subject:	eBay User ID Reminder

Dear anjanbhushan-half,

In response to your request to be reminded of your eBay User ID, please 

find below the information we have on file for you. If you didn't 

submit

this request, ignore this email.

Your User ID is:  anjanbhushan-half

Your registered email address is:  anjan_bhushan@yahoo.com

If you have forgotten your password, you can request it at:  

http://pages.ebay.com/services/registration/reqpass.html

Thank you for using eBay!

http://pages.ebay.com/index.html

My secret question was known to my colleague

Mike was responsible for passing documents to and from company. After disability form by post returned, Mike helped in sending the documents to Eileen and passing it back to me. Mike also brought bundle of papers that was hold by company. This included everything except employee copy of last H1B(visa) approval. I raised my voice via email and Mike about it. Eileen told they didn’t have employee copy,I reminded last time when I received copy of H1B approval it was employer copy not employee copy. I am not sure if they intentionally lost the copy because lawyer should have received it.Anyway, that was the immediate reason for not coming to India in hurry.

Coming back to Mike he also gave me company a few days for food court. He was part of syndicate. When I created an email id and kept the secret question “where you first met your spouse?”, Next time,within couple of days, when Mike came he asked me if I was engaged earlier.[I am unmarried and never engaged].It's hard to believe question was a coincidence.If not so, Mike got info from bugged PC.

From Upendra's ji to Sudhaker's place

Next 2 nights I slept at Upendra ji home. However, it was not a pleasant experience. Sugiti ji(his wife) used to get off the home. Upendra ji explained they had fight over me. It was clear that they are under certain pressure and reluctant to help.

On 13^th received call from Sudhaker. He reported his wife and newly born kid were in India. Hence he was bachelor as well and proposed that I should live with him. I pointed out had not seen his car in last few days.He said, he had started keeping car on the other side. [That side was least convenient thing to do for him unless he wanted to hide his presence for me.]

Although, Sudhaker’s role was beyond doubt that of partner in crime. I still opted for it. As couldn’t printout the document I wrote I was frustrated and thought if I would stop collecting and documenting conspiracy docs, things may slow down. The day I moved to Sudhaker’s home Upendra ji and Siddharth came to meet me at my place. Sudhaker came with me as well. Upendra ji asked him why he sent newly born baby and mother home while it would be hot summer in India. I don’t remember Sudhaker’s reply.

Sudhaker after finding the computer cam said there were some computer cam which could take 30 seconds video if obstruction was encountered. He further said that the video can be emailed as well. He was narrating the functionality of cam that was part of the computer. I don’t believe it was just a co-incidence.

The day I moved to Sudhaker’s place Anil Jaglan(ex roommate) came. He brought beer/alcohol with him and he came to celebrate as per him. It is important to note that I had tried calling Anil after hospitalization he neither picked up the cell nor returned the call.

While staying with Sudhaker used to cooked food, taken medicine [initially], watched movies, created websites. Sanjay ji used to call regularly, I used to call him as well. Just on safe side I used to wear 1 Gb pen drive and kept one more in wallet.

As time passed, situation seemed normal. Sanjay ji pressed for case of Green Card. In 2005 Sanjay ji was not manipulated(unlike most of the friends). I was planning to return to India. After consultation with Sanjay ji I decided to stay in USA and pursue Green Card.

In Days Inn

After returning from NY decided to move into some nearby hotel as fishy stuff were going in apartment. Made an open reservation at Days Inn, Iselin. Moved in Days Inn on 9^th August. I had also taken my laptop. Days Inn had wi-fi based internet connection.

My immediate aim was documenting the basic stuff based on my understanding of what was going on. I also wanted it to be on hard copy. I didn’t notice anything suspicious on first day. I also met Mike first day. He was visibly happy with my move. He was passing comment like I can move to his home. Apparently he didn’t know hotel had wi-fi connection.

10^th August or second day received a call from Millu ji, call lasted for 12 minutes. He almost conducted an interview. He wanted to know what medicine I was taking and how many times. How many times I was smoking. Night of 10^th-11^th was suspicious. On same floor people were talking or making noise at night. At least one couple was talking in Hindi.

On 11^th morning I finished what I wanted to write and made a CD. I went down and walked to printer shop. A person followed me and with his eyes and facial expression frozen on me, clearly showed he was pissed with my effort. It also meant I was followed closely. When the girl gave me printed matter I was astonished, it was not the material I had typed. It was edited material. I went back checked CD version and version on PC all were modified. It means PC I was working was under control of Mafia.Why else someone will follow so closely?

There were a lot of suspicious activity, hotel occupancy had increased and was quite visible on 11^th August. There were more people in breakfast area, there were vehicles in parking area that had driver inside. My car had a bad leak and there were lot of liquid leaked. I called for car replacement. Car was given by different vendor than original vendor. The guy who replaced the car had said leak was related to air bag. After replacing car left the hotel.

In Newyork City

On 8^th August 2005, I was afraid of staying home at night. I tried calling few guys didn’t get response. In fact, have called many other guys between 27^th July and 8^th August but didn’t get response. Although have not slept earlier night, decided to go to NY city and watch a Hindi movie and kill time.

After hospitalization I was using rental cars as I have not taken Prasanna's car back. At 8:30 pm I parked the car in MetroPark Station. When I was about to lock the car a laughing sound came from car. I assumed car was bugged.

I bought a ticket for NY Penn station. Train was delayed. On the way train stopped for long time and I received 2 calls. One from Upendra Ji and other from Amith.I had called Amith a few days back neither he had picked up the phone nor made a return call.

From call logs I found,Upendra ji called at 10:02 pm he wanted to know where I was going and what for. Amith called at 10.14 and also wanted to know the same. When I replied I was going for a Hindi movie ,Amith asked,”alone”.I replied what to do when no one responds.

Time, circumstances and motive of received phone calls points to possibility that both phone calls were co-coordinated.

Train was much delayed when it reached Penn Station. I went Times square and enquired about movie. I was late for the show. I started roaming at Times square and bought some memento T-shirt and cap. Because it was second night without sleep I was tired and feeling sleepy as well. Late night, I returned to Penn station. From there Newark Penn station. There I looked for waiting area. For smoke I went outside couple of time in smoking area. At once instance, an Indian guy came close and asked for a cigarette. I gave him a cigarette. Next thing he wanted was to give me a packet of cigarette. I refused and guarded my gesture.

In early morning 9^th August, I came back to Metropark station. I drove to Dunkin Donut for a coffee. There was at least one vehicle with suspicious activity. It was a truck it arrived after me and driver stayed in truck and was reading a Newspaper. After some time, it communicated with someone far on the otherside of my eyesight in sign language with face and eyes gesture. Then truck left. I do believe those days I was in danger of meeting an orchestrated accident. Sometime later I went to Shoprite. From there called India [Father and Brother].Bought some stuff from Shoprite and then left for home that was a mile from there.

Boiler Repair

Also, a lot of people had vacated apartments at 7 tulip Dr between August 4 and August 6. It included people living at my floor and my side of apartment. And at least 2 apartment were occupied in same period but none on my side on my floor.

On August 5, 2005

Van number XD-8555

A&S Boiler and Burner

973-824-1000

Newark, NJ

Employee : Eric and Anotonio

around 11:10 AM I saw them.

There was a notice about some work in Boiler .My apartment was adjacent to the boiler room.They had a pipe from Van to boiler room and another pipe to outside wall of my Kitchen. When I saw they had fitted a pipe to outside wall.This was weired when purpose was boiler repair. I brought a camera and took a picture of wall and when I tried to take a picture of Van, Eric/Antonio protested and one of them almost ran away and returned after some time.

I don’t know what was that pipe meant for, I do know at that time that was the only apartment that pipe thing was done.

I was a little worried after learning suspicious activities like that boiler van and pipe fitting, also one evening roamed on my floor and on my side of apartment only 2 more occupants were there.

One was neighbor in front of me and another was in last apartment having tiny bulbs in drawing room. My neighbor used to leave apartment in evening as well.

At that time I was trying to document the stuff after taking care of domains. On 7^th August decided to go to nearby area on pretext of changing the mood. Booked a room at

Crossland Economy Studios

2868 Rte 73 N.

Maple Shade, NJ 08052

Before going there I talked with Upendra ji and narrated my plan. I heard Sugiti ji saying “Shivendra has asked to stay at home”. I was amazed by his name. This was the first time I suspected someone from Upendraji’s family. As I understood Shivendra ji while being in India did know something about what was going with me in USA.

I took my laptop as well. Tried to write what I had understood. I didn’t sleep that night.It was raining while I drove back home next day.

Back to Apartment and securing domains - email

Summary : move of anjan.org domain was obstructed may be for email control by mafia who is watching all my emails and phone communications.

--------------------------------------------------------------------------------------------
Once I was back to my Fords apartment I bought a lot of precooked packaged vegetable, chapatti and chapatti like items. I kept it in refrigerator. I had suspected PC being compromised. Worked over domains, I had to make them more secure.

Also, had observed in past anjan.org were compromised /hacked when hosted at tokios.net [Refer Appendix 100] .Had mentioned in NJNYDESIS forum of it being hacked at the time. Also, remember it because on tokios.net I had a blog running at anjan.org. Even though haven’t moved my blog, moved the email to ehostpros. On 23^rd June, ehostpros hosting was disabled.

I will deal it separately as it took lot of time. As, domain registrar was onlinenic.com, subsequently moved the email hosting to Onlinenic’s dns-diy.com on 24^th of June.

As, was not sure about role of Onlinenic hence wanted to distribute the risk after I came back from hospitalization. In first week of August decided to first make anjan.org based email more reliable. Moved registrar to domaindirect.com. It takes 5-7 days for completion of transfer process.

In mean time on August 6, in PKD-22J Jeep van some people have moved in same apartment building on same floor on the other side of entrance area. They had a lot of computing equipment in above mentioned Jeep.

Once the domain transfer of anjan.org completed to domaindirect,
I wanted to move email hosting to yahoo. Was using one of the PC on windows. As soon used submit button after changing dns, internet speed use to be very slow and when I used refresh button the dns use to show unchanged dns provided by Domaindirect .This happened at least dozen times.From the behavior it was very obvious that some one had control of my broadband and my computer screen. After trying for sometime I booted another PC using Knoppix and tried the same thing [modifying DNS] and it worked!

I suspect the people who had moved on 6^th behind this, because of equipment they had and proximity with the apartment. Their proximity probably also explain there was some kind of traffic throttle arrangement in cable broadband internet.

On 8^th of August I found many domains had modification date of 26^th July [Same day Siddharth was asking not to use PC].

I have saved whois record of many domains which have had modification date 26^th July and not only that domains qualityassurance.in and probability.in had street address as “Array” instead of 7 Tulip Dr. I have no made these changes so somone did it.I was not able to modify “array” to something meaningful and had to send support an email to change it. All these domains were registered with Onlinenic. Also, even after transfer anjan.org was still in onlinenic’s account and not in transfer out list. That’s why I suspect some level of foul play by Onlinenic as well.

Vigour.com was also manipulated on 26^th July 2005 however this was at Godaddy.

I also moved premium .in to dd24.net and email address of many domains contact modified from anjan[at]anjan.org to bhushan_domain[at]yahoo.com .

One thing was for sure that all of my PC activity was being watched by sophisticated hacking equipment.

Note : This was the incident which made me think if is it related to domain?

APPENDIX 1000

http://groups.yahoo.com/group/njnydesis/message/4702

Re: somebody did hack my one of the email

hey Anjan,
How do you find out if your inbox has been hacked into?
( no kidding this time , genuine question )

--- In njnydesis@yahoogroups.com, "anjan bhushan"
wrote:
>
> No damage was done. That email is only used to manage my domains.
> That particular person could have started transferring my name to
> some fictious/real person in Nigeria or Brazil. However nothing
like
> was done when I realized.
> --- In njnydesis@yahoogroups.com, "Anu" wrote:
> >
> > What was the damage ?? Did you have any confidential info stored
in
> > there ???
> >
> > -Anu
> >
> > --- In njnydesis@yahoogroups.com, "anjan bhushan"
> > wrote:
> > >
> > > associated with most of the domain property yesterday.Hence was
> > able
> > > to enter into one of my account at a particular registrar.
> > > However no damage was done and for precaution I moved it to a
> > > different host.
> > > Just wanted to let everyone know these things are real. I am
> again
> > > scared of posting in forums using my real name. But will try to
> > > manage the risk.Be safe while you are online!!!

Discharge and Siddharth’s Place

1.0 On 25^th July I was discharged from Muhlenberg. Mr Upendra brought me home. Before hospitalization I handed over sim card with wallet to Shaleen. After hospitalization mr Upendra handed over cell phone and wallet, he pointed out sim card was missing. Home phone was disconnected as well [seems online bill didn’t go through in timely manner].So, phone facility was out of reach from me. Late in evening my cousin Siddharth, his wife Yamini and Shaleen came. They convinced that I should go to India. Shaleen said he would come to pick me up next day i.e 26^th of July. On 26^th of July Shaleen drived me to Siddharth’s place. Siddharth adviced me to sell stocks. I did. He was advising to stay away from computer.[Incidentally, later I found there were many domains that had modified date of 26^th. Someone had done modification on domains.]. Prasanna called at Sid’s phone and urged to remove the pages I had posted while going to Baltimore.[mentioned in previous post] I had working password for geocities account saveanjanslife. I renamed the file index.html to index1.html. A mirror website password was hacked or didn’t work. I did send a confirmatory email to Prasanna using my gmail. [APPENDIX 100]

In evening, Siddharth took me to Dr Upendra’s place and asked to took the stuff I left at his place. It included some data with electronic evidences and corresponding devices. We also went to market where I bought a prepaid T-mobile sim card in name of activation of new number. I didn’t have set with me. I believe that was the reason for it not being activated.

When we returned home, I DO REMEMBER CLEARLY HIS DOOR LOCK WAS BROKEN OR MADE SO FROM INSIDE. I remember it because I had went out for smoking before. I pointed it out to Siddharth. He gave some answer which I don’t remember.

There was a some suspicious activity outside which I don’t recall correctly. At night I tried putting sim card and service provider allowed activating it for old number. My cell phone was back. I went for smoke and found the door mentioned before was NOT LOCKED. I didn’t sleep and decided I would return to my apartment. By that time, I was suspicious of Siddharth ,Yamini and Shaleen .But,I thought though they probably are under some kind of threat.

In morning after Siddharth left. I tried calling Shaleen multiple times fromSiddharth phone. He didn’t answer. There was a guy sitting opposite to the room I was staying in adjacent home. His was constantly watching towards my room. I put curtains. Some time later Yamni came and removed the curtains.

I took bath and then 2 of my bags and told Yamini I was leaving for my apartment. She didn’t offer any help in getting a cab anything like that. She panicked and said I can’t leave. I said I have to go to my apartment. She replied she would call police. After verbal disagreement I left home on foot and decided to leave. I thought I would go to nearest store and would ask for cab numbers. After going for 300-400 meters on road Police came and picked me up. They asked where I was going and also told they have received a phone call. Cops brought me back to Siddharth’s home. I was sitting at the back of the cop’s car. I told cops I would like to go home and shown discharge slip allowing me to going alone for walk, drive etc. Siddharth came by that time. Cops talked to Yamini and Siddharth. And took me to UMDNJ acute psychiatric service.

At UMDNJ Phone was visibly made available for patients as a phone set was connected in patient area with long wire. I talked to Siddharth. After 6-8 hour of observation I was discharged. Hospital people asked me to wait for Siddharth as they needed to talk to him. Siddharth and Yamini came and picked me up from hospital.

They finally dropped me to my apartment.

APPENDIX 100

Anjan Bhushan

to Prasanna

show details

7/27/05

my login/password - or email for password retrival is not working as well. http://whiteboard.blogsome.com/wp-login.php However changed the content at geocities page. http://www.geocities.com/saveanjanslife/ will try to change dns of whiteboard.in. it will solve the redirection but not the actual page. Hope whoever have done it will resolve it. take care anjan

Inside Muhlenberg Hospital

1.0 Inside Muhlenberg Hospital –

1.1 Initially I kept sort of hospital diary on pages and on book from 07/17/2005 to 07/20/2005 . I was intimidated by one of the nurse against it. I don’t remember the words but I stopped writing diary after that.

1.2 Later in hospital a girl whom I recognized as Rajani Kurukal / Rajani Prabhu was admitted to hospital last name probably was Bhattacharya. I knew her since she was my roommate for short duration. Whom I asked to vacate the apartment on very short notice. I had some guilty feeling for inconvenience she might have faced.

Whenever I used to go to common room. She used to arrive in the Room. When I used to stay in my room, she used to talk over phone outside my room for long duration.

I didn’t talk to her as at the time of her admission I asked her name she replied why I wanted that. I talked about her to Hospital Superintendent , I believe Elizabeth and my social worker Pandaya. There were some more patients and staff that were there.

1.3 One of the staff, I believed she was a nurse one day called a Group[not sure probably Cathy]. I was the only participant. She asked question like which song I would like to listen. Besides other things, she wanted me to know even some prominent people had died in hospital. I remember she gave me some newspaper clipping to emphasize it. Session was intimidating.

I don’t remember the details in between. But it was intimidating. I requested Hospital Superintendent Elizabeth [if my memory is correct] to talk. I talked something like I am humble guy with humble need, I don’t think anything big.

I don’t remember rest of the talk but in essence I accepted the situation as medical condition. Sometime after the talk surrounding was normal.

1.4 One of the days Pandya my social worker asked me to sign paper that I had Bipolar Disorder. He also said it will help me getting out of hospital. I signed the paper.

A few days after that he again came with a bunch of paper and this time asked me to sign on Schizophrenia. I replied I would sign on each individual page. Then Pandya said he would be in trouble in that case.

1.5 In hospital most of the days I spitted medication in toilet.

1.6 Many things had happened in hospital that were fishy. I don’t have exact memory to narrate, many other patients and staffs were used.

Return to NJ and Hospitalization

4.0 I came by train at Metro Park station. There were 2 people worth mentioning at visitor parking lot. First was a black lady whom I had seen in apartment and second was Brian Feinberg an ex employee of Apogee Networks [now Evident Software]. Brian was considered close to Saul Einbinder. Who had left Apogee Networks[now Evident Software] on 15^th July.

Mr Upendra came and he picked me up from Metropark and took me to his home. Soon after that they called Shaleen. I learned from them Shaleen and Sudhaker had filed a missing person report. Its point to noted that SUDHAKER WHO IS A SOFTWARE PROFESSIONAL AND SHALEEN WHO WAS A SOFTWARE PROFESSIONAL AND DEALS IN COMPUTER ON DAILY BASIS DIDN’T SAW ANYTHING WRONG with payment directory stuff posted when I went Baltimore.

A cop came and did some formality. Mr Upendra, Dr Sugiti and Shaleen convinced I need medical checkup. I was tired and agreed. We went to JFK’s hospital Muhlenberg center. I was not familiar with procedure. I trusted my relatives and Shaleen. I signed a few paper. And I was hospitalized. Till that point I thought relatives and Shaleen hasn’t understood what’s going on.

Baltimore

I was followed at Baltimore as well. I forgot name of the Hotel. Once I returned to my room my access card for the room didn’t work. I had to get new key. I suspect when I used to go out someone was searching my luggage.

Also, in 2 locations I felt a private detective agency had followed me.

I called Mr Upendra and Mike Lee from Baltimore to read the story I had posted on Geocities website. Subsequently after two days I called Mr Upendra, assuming he might have a better perception of situation. I narrated desire to return to NJ and informed him that I would contact him once I would reach NJ.

Images of Hacked directory

Panic and Left home

1.0 Panic and Left home – 15^th of July – I did post on a newly created geocities website after leaving home. And also posted in a forum. Because of poor language written in hurry, some of the stuff was not clear. Some of the points from that piece.

1.1 I was trying to make payment to PSE&G, Comcast and At&t. When I used land line phone and then cell phone and both of the them got disconnected. I didn’t have landline call log but cell phone log of 15^th July shows 2 call at 800 number after 4.00 AM in morning. From Google search one of them came to be PS&G collection [800-357-2262].It means my phones were bugged.

1.2 Even with online payment I faced some disruption of internet connection. I did save payment info to USB drive. Best of my memory I had used home PC and not the office laptop for that. On the way to Baltimore when I tried to see it, I found it manipulated. MOST LIKELY SOMEONE MANIPULATED IT WHILE I WAS SAVING IT ON PC. It means my PC was in control of someone . I did post one screenshot of the directory with post at that time. Later when I connected USB drive to Baltimore Hotel’s computer, even those manipulated content were erased. [Refer to nest post for the images].

1.3 I did observe 2 cars were in parking lot that previously had followed me. I have no proof for that but I do believe that I was followed.

I left home thinking Shaleen and Upendra were not able to understand what’s going on. It would have been almost impossible to convince a possible danger based on electronic manipulation. Also, till that point I was thinking someone has given false impression to company. It didn’t came in my mind company itself might be involved itself.
Note : In next post you will see images. In last 2 images there are files and directory with strange characters and date strange modified dates.

Felt Being Followed

In week of 7th and 15th July 2005. I felt being followed while I was driving. I contacted Shaleen(a friend at the time) for arranging me an attorney. Later when Mr Upendra (Uncle) called me I requested the same thing. So many things was going on that week ,I thought some law enforcement authority was working on false tip.

provd directory, Ivan and John

On July 8^th, Ivan and John was pushing for MQ related test. Someone deleted the working directory on test machine. It was late evening and as per reply in list, Ivan and John were working at that time.

[Appendix 100] – I reported politely provd directory being deleted.

[Appendix 200] – After I reported directory being deleted I sent another mail that I would send the logs after I configure it again. Ivan replied to the email and instructed to setup another MQ server on Windows. Point to note is John who was the developer was arguing something that was not the functionality. I had reported observations against John’s point of view. And before directory was deleted I was trying to verify John’s explanation.

I believe Ivan and John were trying to fail me in assignment or make me look crazy.

APPENDIX 100

---

From: Anjan Bhushan
Sent: Friday, July 08, 2005 8:08 PM
To: John Clark; Ivan Ho
Cc: Shao-Min Sun; Jeyashree Chidambaram; Anand Nanjunda Swamy
Subject: RE: MQ restarts

Something weired has happened. I tried to put some file from a directory to input directory. It couldn’t copy. I rebooted the server, provd directory is not there. Seems like data corruption.

Or anyone else using the same same setup?

---

From: John Clark
Sent: Friday, July 08, 2005 7:41 PM
To: Anjan Bhushan; Ivan Ho
Cc: Shao-Min Sun; Jeyashree Chidambaram; Anand Nanjunda Swamy
Subject: RE: MQ restarts

The PS retries the recovery every 5 seconds. Are you saying that it never successfully re-establishes connectivity? You should see a log message “Re-initializing MQ runtime...” followed by “MQ initialization successful” if connectivity was re-established. If exceptions continually occur after the “Re-initializing MQ runtime...”, then perhaps the MQ Java classes are holding onto something in the VM that prevents re-connection. I’ve tried to gracefully shutdown and cleanup any MQ resources as part of failure detection, but that results in the VM hanging forever in MQ call(s).

Can you send me the log from your test?

JohnC-

---

From: Anjan Bhushan
Sent: Friday, July 08, 2005 7:08 PM
To: John Clark; Ivan Ho
Cc: Shao-Min Sun; Jeyashree Chidambaram; Anand Nanjunda Swamy
Subject: RE: MQ restarts

Thanks John. In WAS behavior is different, probably because of connection Pooling?

But just verified doing so, it doesn’t recover. Also I remember multiple time when I had to take care of MQ and WAS, each time I restarted MQ provisioning server was being restarted by users.

Am I missing something John?

---

From: John Clark
Sent: Friday, July 08, 2005 7:01 PM
To: Anjan Bhushan; Ivan Ho
Cc: Shao-Min Sun; Jeyashree Chidambaram; Anand Nanjunda Swamy
Subject: RE: MQ restarts

As part of recovery, I tear everything down and re-establish the QueueConnection, Session, QueueReceiver, QueueSender, and Queues.

JohnC-

---

From: Anjan Bhushan
Sent: Friday, July 08, 2005 5:59 PM
To: Ivan Ho; John Clark
Cc: Shao-Min Sun; Jeyashree Chidambaram; Anand Nanjunda Swamy
Subject: RE: MQ restarts

Sure Ivan. I think answer should be no. As provisioning server will have session open.

I may be wrong.

---

From: Ivan Ho
Sent: Friday, July 08, 2005 5:54 PM
To: John Clark
Cc: Anjan Bhushan; Shao-Min Sun; Jeyashree Chidambaram; Anand Nanjunda Swamy
Subject: MQ restarts

Hi John,

If the Provisioning Server is running and MQ was restarted, would the ProvServer recover from that restart?

Anjan, please add this to your exception testing…

Thx,

Ivan

==========================

Ivan Ho (iho@evidentsoftware.com)

Director of Engineering

Evident Software, Inc.

Tel: 973-338-2300x251

==========================

THIS TRANSMISSION CONTAINS CONFIDENTIAL AND/OR LEGALLY PRIVILEGED INFORMATION INTENDED ONLY FOR THE USE OF THE INDIVIDUALS NAMED IN THIS MESSAGE. IF YOU ARE NOT THE INTENDED RECIPIENT, YOU ARE HEREBY NOTIFIED THAT ANY DISCLOSURE, COPYING, DISTRIBUTION OR THE TAKING OF ANY ACTION IN RELIANCE ON THE CONTENTS OF THIS E-MAIL TRANSMISSION IS STRICTLY PROHIBITED. IF YOU HAVE RECEIVED THIS TRANSMISSION IN ERROR, PLEASE NOTIFY US IMMEDIATELY SO THAT WE CAN ARRANGE FOR THE RETURN OF THE DOCUMENTS TO US AT NO COST TO YOU.

Appendix 200

---

From: Ivan Ho
Sent: Friday, July 08, 2005 8:15 PM
To: Anjan Bhushan; John Clark
Cc: Shao-Min Sun; Jeyashree Chidambaram; Anand Nanjunda Swamy
Subject: RE: MQ restarts

Anjan, if you’re planning to do more MQ restarts, can you setup another MQ server on a window’s box? I don’t want to interrupt 10.1.0.132 since others are using this for their testing.

Thx

-Ivan

---

From: Anjan Bhushan
Sent: Friday, July 08, 2005 8:12 PM
To: John Clark; Ivan Ho
Cc: Shao-Min Sun; Jeyashree Chidambaram; Anand Nanjunda Swamy
Subject: RE: MQ restarts

Will setup again and will send the log as well.

---

From: John Clark
Sent: Friday, July 08, 2005 7:41 PM
To: Anjan Bhushan; Ivan Ho
Cc: Shao-Min Sun; Jeyashree Chidambaram; Anand Nanjunda Swamy
Subject: RE: MQ restarts

The PS retries the recovery every 5 seconds. Are you saying that it never successfully re-establishes connectivity? You should see a log message “Re-initializing MQ runtime...” followed by “MQ initialization successful” if connectivity was re-established. If exceptions continually occur after the “Re-initializing MQ runtime...”, then perhaps the MQ Java classes are holding onto something in the VM that prevents re-connection. I’ve tried to gracefully shutdown and cleanup any MQ resources as part of failure detection, but that results in the VM hanging forever in MQ call(s).

Can you send me the log from your test?

JohnC-

---

From: Anjan Bhushan
Sent: Friday, July 08, 2005 7:08 PM
To: John Clark; Ivan Ho
Cc: Shao-Min Sun; Jeyashree Chidambaram; Anand Nanjunda Swamy
Subject: RE: MQ restarts

Thanks John. In WAS behavior is different, probably because of connection Pooling?

But just verified doing so, it doesn’t recover. Also I remember multiple time when I had to take care of MQ and WAS, each time I restarted MQ provisioning server was being restarted by users.

Am I missing something John?