Bitcoin Forum

Guys the latest wallet stealing viruses are testing clean on Virus total, malware bytes, and superantispyware. I actually had a keylogger in my system for weeks that was specifically geared to capture my passwords. The ONLY thing that saved me was my antikeylogger. I could have lost THOUSANDS of dollars. I was So thankful I wrote the company a letter. Guys its $45 , GET THIS SOFTWARE!!! I am not affiliated with QFX in anyway, nor do I profit if you buy it, it just saved my ass big time, and I wanted to help QFX and the crypto community. http://bitcoinlasvegas.net/the-best-anti-keylogger-software-in-the-world-heres-is-absolute-proof/ (http://bitcoinlasvegas.net/the-best-anti-keylogger-software-in-the-world-heres-is-absolute-proof/)

Vegas

thanks - great information!

yup sad to say oh well win some loose some.Trying to get rid of infection.  :P

Thanks for posting this. Great review as a last line of defense for someone whose cryptocurrency strategy involves the risk of sometimes installing potentially dangerous software. I bought it immediately.

Except getting into crypto that $45 was the greatest investment Ive EVER made! NOTE: you MUST buy the premium version to get Cryptowallet protection (its $45) and goes on 3 computers, and protects ALL cryptowallets. One day , youll be glad you bought this. This shit is getting WAYYY too common!!

Vegas

Cool thanks for sharing.

I bought it!

yeah for the cost of 0.2btc, compared to the value of a alt portfolio, the key logger software is a must imo

Im not ashamed to say I was a victim of a keylogger on August 2nd 2014. They cleaned out EVERYTHING, my biggest holding was 7700 BTCD (Bitcoindark). +/- $37,000 . I SWORE I would never go through this again :( It is beyond depressing :( Nobody can understand , unless youve been though it, its devastating :(  If you want details on my story https://bitcointalk.org/index.php?topic=721306.270;imode (https://bitcointalk.org/index.php?topic=721306.270;imode) . I know the pain, and I dont want it to happen to you guys too . Think about all the money you spend on crypto, and you DONT have THE most important part, a good antikeylogger.

Vegas

Thanks for the information these keyloggers are so annoying.

tyvm for great info

Agreed especially if they get your passwords. Disaster.  :-\

Thanks. Like I said in the Dracula Ann before it imploded. "Coming to suck my btc".

Once I was playing with Keyloggers too, so for you just one notification, actually what keylogger does, alow attacker to have control over the victim PC, but first what attackers do is that they download your saved passwords what you have in firefox, chrome..ect ect so the best protection at first is to encrypt your saved passwords...in Firefox option: Use a master password.
And buy some software, because one time when they connect to your PC they can install any Keylogger, even that what you are tipping on your keyboard can be saved to a .txt file...stay safe ;)

Thanks for the warning, nice catch!

This is for mainly windows systems though isn't it or am I wrong? Also only if you download malware to begin with? I never download on this linux system but do click links now and again, can't get them from just clicking links can you, Has to be downloaded like from one of these crappy wallets mentioned? Thanks anyone who can answer who is in the know. Sorry to hear that vegas about your loss but at least you learnt and it won't happen again and you're helping us who it hasn't happened to which is good!

Yobit is the only Exchange with DRA. They will be happy when they will hear this. LOL

EDIT: They are using Linux...So no problem for them.

Yes I'm using Windows ! Yes of course, only if you download malware somewhere, mostly in cracks, small softwares, cracking softwares, they can be hidden anywhere, can be attach at any software, pic...and mostly they are like 325 kb large, so mostly noobs just upload around 325 kb by different name, so be careful when you see some software or crack arround that number.
In Task manager you can find it by the name "server.exe" or "msnm.exe" or any name but those two is by default of that Rat softwares.

Thanks for the info.Will def be buying that software when I get the chance.I think I got it all off here.Thought I did  started up my 007 wallet and 250 coins went poof lol so was still on here did a scan with panda deleted a buncha stuff.hopefully were clean now but kinda afraid to start up wallets again thumb drive were they on says clean so i don't know

Infoirmation forwarded to all concerned parties.




HI!
 
This is short info. I will sleep few hours and give you more.
 
We found hacker with one of your CCB transaction.
 
Login: BuzzBuzz
Email: xh@live.be  (you can find a lot inresting info in google with this email, good for investigation)
IP adresses (probably proxy/vpn): 2.49.238.233, 92.99.158.27, 94.57.10.39, 31.215.122.14, 92.99.166.31, 2.49.255.193, 86.97.250.141
(Almost all ips are from Emirates, example - http://whois.domaintools.com/2.49.238.233
I don't now is it vpn/proxy, or real adresses. I will check it. )
 
Reg date: 19:50:49 20-05-2015
 
One of refferers before auth -
https://bitcointalk.org/index.php?topic=1076331.new

(seems like it's drakula dev)
 
 
What was intresting found about "xh@live.be" -  
 https://bitcointalk.org/index.php?topic=500175.455
xh@live.be belongs to user hanoosh -
https://bitcointalk.org/index.php?action=profile;u=246899
His posts: https://bitcointalk.org/index.php?action=profile;u=246899;sa=showPosts
So, hanoosh is hacker and Lion Coin dev - https://bitcointalk.org/index.php?topic=649055.0
Unfortunly hanoosh is not active on Bitcointalk now.
 
Hanoosh GIT page - https://github.com/Hanoosh
 
Hanoosh on cryptocointalk - https://cryptocointalk.com/topic/12407-lion-lion-information/
 
Not sure, but seems like he was born in Palestine - https://bitcointalk.org/index.php?topic=705019.msg7970500#msg7970500
and may be lives now in Emirates.
 
I will sleep few hours and will try to investigate/send you more information.

"I Vant To Suck Your Coin."

Jeez...the scammer must have a sick sense of humour.

Alts Has increasingly been to spread viruses. Thanks for the warning!
Use https://www.virustotal.com/

He is one of the guys doing it.He has been real busy as of late.Don't ask this fucker for any help and don't buy anything he has to offer or your taking a big risk.I cant even mine anymore I cant find any clean downloads every time I download a mining app Like Multiminer/cudaminer/ccminer/bfgminer its infected with trojan.Thats how he got into my system a second time after I cleaned or thought I cleaned out infection now all that shit is just deleted.I dont know how to complie my own apps or I would do just what Nate Wools told me to do.I have ALWAYS had a big problem understand the cmd line it just confuses and befuddles me.I was trying to save up a bit to get my car fixed and to take some online classes on this crypto thing to learn how to compile my own apps and to set up pools.Im sick of relying on other pools to mine at and downloading infected shit.

a very interesting thread,

if running alt coins , in particular with a dev. that has a reputation such as this always use virtual machine

virtual box is free

if you are not into linux , run windows inside of windows,  you can 'create' several vm's

the person above , curious the same person who was responsible for this was involved with razor....

i remember some other questionable people involved with that coin....

i truly feel bad for anyone who is a victim of a theft like this, it is shameful

also what the op stated about these 'wallets' being clean on virus total ect....

remember virus total can expose 'known' maliscious code......

if the crook uses a known virus and changes a few things around...............well.......... it is not going to come up hot....

even if you compile the wallets yourself...... unless you read through and carefully understand the code this can happen,


if anyone can point me to a link of the original github source code that had this 'virus' aka 'keylogger' in it I would like to inspect it closer.

Curious if they used similar techniques as I have seen used in the past or not....

good thread.

Thanks vegasguy for sharing this, it's much appreciated.

I wish it were free software though :S

I don't have the source code but I do still have the original infected file all zipped up just the way it came

thank you for the information, i'll be more careful now in choosing altcoins and do a lot of research before investing so that i can avoidbeing hacked