Bitcoin Forum

Today I randomly got a dropbox share from someone named Matthew Jones that contained a bitcoin.js file. Anyone know what sort of scam is going on here? the file doesn't show anything clear. Thanks for any help.

Be careful. Examine the motivation behind this action: would you send someone a "random ass money" with no instructions? More likely this is malicious code, designed to rob you of your value.

If you are curious (and remember what curiousity did to our favorite feline), open the file in a virtual machine for further investigation.

Scan it for malware on virus total?
However if you have no need for it, just don't use it.

Can a .JS file do anything? I don't know how to code so I can't tell if there is anything malicious in it.

Well it can basically have all sorts of dangers in there if you execute it AFAIK, so I would suggest you stay away from it.

Why have you opened your drop box to others?
You don't know who Matthew Jones is?
Most probably the Locky ransomware virus.

https://blog.avast.com/a-closer-look-at-the-locky-ransomware

it can do a lot more harm than you'd think. run random javascript files that you found on the internet and next thing you know your PC have a ransomware. .js malwares is just getting as common as .exe malwares.

It is just common sense to not open these type of things..

If you receive emails like this, delete them straight away and don't even think about it for a second. It is just not worth the trouble you will get.

As others have said, no stranger will ever give you something for free in a random fashion like this. Don't buy into it.

Can you open it in an online text editor and add it to his tread in "code" statements.
Also, it is probably a virus, test it if unsure on vrustotal.com
If it is nothing clear when opened in plain text format, it has proably been converted to a binary executable that can load straight from the file and cause problems to the computer, if downloaded, remove immediatly and quarenteen any surrounding files in offline partitions.

it sounds really suss i would stay well clear and def dont download and open it...... :D not on a machine which holds private keys anyway.

edit: i just checked my emails and have received a similer email.  http://imgur.com/muIbFW9 (http://imgur.com/muIbFW9) What yous think? i doubt its even from Dropbox?

Can you post the headers of the email, it can be traced back to originating IP
Take your email out of course by editing and replacing with a made up address.

1.To begin, open the email message by clicking on it.
2.Click on Details (right above the To: and From: fields) and choose View Message Source.
3.The full headers will appear in a new window, simply right-click inside the headers and choose Select All, then right-click again and choose Copy.

Paste the detail here http://www.ip2location.com/free/email-tracer (http://www.ip2location.com/free/email-tracer) you will then find what country and IP

Can you give the link of the dropbox if where can download this files i just want to review the codes if this is type of ransomeware.. or just pm me the link..
I am not afraid of any ransomeware.. i am using vps and protected by kaspersky total virus.. which is updated in bitcoin protection..

becareful dude,
step 1 : go to ttps://www.virustotal.com (http://ttps://www.virustotal.com) and select tab file.
step 2 : and browser your "bitcoin.js" file
step 3 : Hit "SCAN IT" wait the process
step $ : see the result, if virus total detect some virus, definitely dont open that file!

just advice, do not open any files from strangers. thanks, have a nice day :)

You should indeed test it on some viruses, I would recommend you to not open it and stay way from it.
This is just a virus and this guy wants to scam you for sure.

bitcoin is only a small amount(well under 0.1%) of the world usage..
so its still not something that regular people would recognise, and most scammers still prefer the bank/paypal data grabs for the general public

so chances are someone who knows you and knows that you are interested in bitcoin and knows your drop box might be involved in sending it to you.

i do not think its random or spam otherwise all/many drop box users will be complaining about a bitcoin.js appearing.. so i beleive its more of a specific attack on yourself.

so think hard and long about people you communicate to on the internet and in real life that know about your drop box and also know your interested in bitcoin

I haven't use Dropbox at all I am using other cloud storage solutions but can't you make your Dropbox accounts private so no one will be able to send you fishy files? What if you are in a hurry and open one of these strange files with catchy names and get your system infected and lose a lot of valuable data and your Bitcoins this is just ridiculous. I would have never allowed other random people to share files with me over the Internet. I can't even imagine the level of scamming that is going on over there.

It's definitely a virus. I got a similar email today that had "electrum.exe" and "wallet.js"

AS i said i dont even think it was a legit dropbox email, it looked really dodgy.  when i logged in to dropbox there was nothing saying i had a message or had received a file.  it was a spam email hoping i would click it.  Unfortunately i have deleted the file so cant post the headers or the file its self now..... just glad to get rid of it.

I also got a share at Dropbox from a user "Poloniex Inc", it was 2 windows executables with some ransomware.

So op you don't tested it with antivirus, anti malware tools? I am interested in report of files like these as I got infected with ransomware malware in the past.
In result of this my laptop was totally ruined with every possible file encrypted by CryptoWall ransomware. I am desperately seeking any news about it.

Agree with all the rest, if you are not expecting anything and you get something like this just delete it and carry on about your day.

Doesn't Dropbox scan the files being uploaded and shared on their website? It's surprising if they don't.

Also, don't open any files sent by unknown users and report such documents to dropbox so that they can take care of such malware.

yeah it also happened to me. but thats a scam. never open any exe files downloaded somewhere from the internet. even when its scanned by antivirus it can get very bad

Yea you should just get rid of it, no sense in putting your system at risk by opening the file. I guess though if you got an old computer/laptop you don't use anymore, you could investigate further just for fun.

Better you delete it.You definitely dont know the sender and his intentions,so why take risk or waste time on investigating what it contains.Even if it has coins,you dont own them so deleting wont make you lose anything

I doubts anyone will give a random Dropboxer / stranger free Bitcoin. I'd suggest you to keep it in a place but just don't open it. Who know? Sometime later, you might need it - who know what it contain? For now, just keep it and do not open.

I have a question related to Dropbox, my Multibit HD is storing wallet backups there, is it safe or not?

Thanks for the info Pedrog :)  how did you check it out? inside a virtual machine?

I suggest you to just stay away from it, it won't harm if you ignore it right? You better learn something new to stop the curiosity of it.

They say curiosity killed the cat... You will most probably end up with a jack in the box Trojan or some malware... so I would just move it to the deleted folder and be done with it. If I wanted to

send you money, I would most certainly not do it without telling you why I did it. People sending random files to unknown recipients do it with malicious intent.. and this is one of those instances,

where you should not fiddle with unknown files.

Are you able to submit the sample to virus total? For the spirit of analysis, are you able to host it somewhere?

If you don't know him, just ignore that. It wouldn't hurt if you ignore that, right? Don't open it or anything. It's only common to not trust strangers on the Internet. Also if you don't open that file, nothing will happen. But if you do, then there's a possibility that your files/accounts will get stolen.

I assume you don't know the person since you said 'someone named Matthew Jones'. It's highly likely that the file is a malware that can steal data from your pc so you'll probably be better off not touching the file at all.

If you have opened the file already, well, bad things can happen. Run anti-malware scans and set up/renew securities for all your accounts. Probably even reformat your pc just to be somehow, safe.

i did a google search. probably this guy. seems legit:

https://sakaiproject.org/sites/default/files/Matthew-Jones.jpg

Got this email today too. Didn't even bother checking what file was linked, but if it was the .js file then it's the one who's been doing the rounds lately, I've already got it directly in an email attachment before...

Hope these guys get nothing with these methods.

I got a similar Dropbox share as well. It just stated that so and so wanted to share files with me but I didnt open them. i just opened the email but not anything else. I may have tried to open it on my phone, there is no bitcoin info on my phone, but just in case could that file infect my phone?

thanks

Mine looked almost exactly like yours did. Like I said, I didnt open it or even view it except the email, it also came from dropbox, but who knows. Glad I just deleted it..

I am curious how do people know your Dropbox account or share in the first place?