Bitcoin Forum

Other => Beginners & Help => Topic started by: craZyLovE0916 on March 26, 2017, 07:09:15 AM



Title: 13JF5274VuNthhwKkLrYyZW73smjSYAEen
Post by: craZyLovE0916 on March 26, 2017, 07:09:15 AM
is there anyway to bug the address??

look at this addres  13JF5274VuNthhwKkLrYyZW73smjSYAEen

i played dice.. not important the sites when i copy the address then i paste it to make deposit, this is the address always shows 13JF5274VuNthhwKkLrYyZW73smjSYAEen
so i had made it twice .. yeah beacuse i dont notice it until asking myself why i dont get any confirmation.. then i check my wallet.. so i tried to copy again to paste it still showing that address

 https://blockchain.info/tx/a20094ca1589c02e960ed0de824e1abe6ba2a489c1baa5b09bbc7ee5bb771d07
https://blockchain.info/tx/a150d7f785480dfb1c5c21ac54526ba2d08bd31c6342b7480a82741785899d6e
not big but if you check the address those earlier depositors making big deposit got hack i guess...


Title: Re: 13JF5274VuNthhwKkLrYyZW73smjSYAEen
Post by: Iranus on March 26, 2017, 07:24:10 AM
So you're saying that whenever you copy an address the same address gets pasted?

That most likely means you've got a virus and you need to run some scans.  Those viruses are pretty annoying because if you forget about them at any point and copy/paste you might lose your Bitcoin.

You could look at this guide (https://bitcointalk.org/index.php?topic=929882.0) for compromised computers (although that kind of virus probably won't threaten your security).


Title: Re: 13JF5274VuNthhwKkLrYyZW73smjSYAEen
Post by: ultrloa on March 26, 2017, 08:37:01 AM
is there anyway to bug the address??

look at this addres  13JF5274VuNthhwKkLrYyZW73smjSYAEen

i played dice.. not important the sites when i copy the address then i paste it to make deposit, this is the address always shows 13JF5274VuNthhwKkLrYyZW73smjSYAEen
so i had made it twice .. yeah beacuse i dont notice it until asking myself why i dont get any confirmation.. then i check my wallet.. so i tried to copy again to paste it still showing that address

 https://blockchain.info/tx/a20094ca1589c02e960ed0de824e1abe6ba2a489c1baa5b09bbc7ee5bb771d07
https://blockchain.info/tx/a150d7f785480dfb1c5c21ac54526ba2d08bd31c6342b7480a82741785899d6e
not big but if you check the address those earlier depositors making big deposit got hack i guess...

I think you downloaded a virus and you should run an antivirus so that you won't compromised by it and i remember that their are several cases just like that and stolen money of the people who suddenly pasted that wallet addy. You should be more carefull from this kind of malware and don't ever click some unknown links so that you wouldn't be hit by the stealers.


Title: Re: 13JF5274VuNthhwKkLrYyZW73smjSYAEen
Post by: shorena on March 26, 2017, 10:40:53 AM
is there anyway to bug the address??

look at this addres  13JF5274VuNthhwKkLrYyZW73smjSYAEen

i played dice.. not important the sites when i copy the address then i paste it to make deposit, this is the address always shows 13JF5274VuNthhwKkLrYyZW73smjSYAEen
so i had made it twice .. yeah beacuse i dont notice it until asking myself why i dont get any confirmation.. then i check my wallet.. so i tried to copy again to paste it still showing that address

 https://blockchain.info/tx/a20094ca1589c02e960ed0de824e1abe6ba2a489c1baa5b09bbc7ee5bb771d07
https://blockchain.info/tx/a150d7f785480dfb1c5c21ac54526ba2d08bd31c6342b7480a82741785899d6e
not big but if you check the address those earlier depositors making big deposit got hack i guess...

There is known malware (dont remember the name) that finds and replaces bitcoin address in your clipboard. Sounds like you are infected.


Title: Re: 13JF5274VuNthhwKkLrYyZW73smjSYAEen
Post by: HI-TEC99 on March 26, 2017, 02:24:38 PM
is there anyway to bug the address??

look at this addres  13JF5274VuNthhwKkLrYyZW73smjSYAEen

i played dice.. not important the sites when i copy the address then i paste it to make deposit, this is the address always shows 13JF5274VuNthhwKkLrYyZW73smjSYAEen
so i had made it twice .. yeah beacuse i dont notice it until asking myself why i dont get any confirmation.. then i check my wallet.. so i tried to copy again to paste it still showing that address

 https://blockchain.info/tx/a20094ca1589c02e960ed0de824e1abe6ba2a489c1baa5b09bbc7ee5bb771d07
https://blockchain.info/tx/a150d7f785480dfb1c5c21ac54526ba2d08bd31c6342b7480a82741785899d6e
not big but if you check the address those earlier depositors making big deposit got hack i guess...

There is known malware (dont remember the name) that finds and replaces bitcoin address in your clipboard. Sounds like you are infected.


Symantec describes one called the Trojan.Coinbitclip virus, although there are probably many others. It recommends a complete system scan, but has a faster fix using a removal tool.

Personally I would remove it using a free linux live CD from another company, then get all my data off windows, then wipe the disk and reinstall windows.

https://www.symantec.com/security_response/writeup.jsp?docid=2016-020216-4204-99&tabid=2

Quote
Discovered: February 2, 2016
Updated: February 2, 2016 6:51:26 PM
Type: Trojan
Infection Length: Varies
Systems Affected: Windows
Once executed, the Trojan creates the following files:
%AppData%\Blizzard\Hearthstone.exe
%UserProfile%\Application Data\hearthstone\updater.exe

The Trojan creates the following registry entry so that it runs every time Windows starts:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\"Hearthstone.exe" = "%AppData%\Blizzard\Hearthstone.exe2

The Trojan then monitors the compromised computer for Bitcoin addresses copied to the clipboard.

The Trojan contains a hardcoded list of Bitcoin addresses.

Once the Trojan detects a Bitcoin address in the clipboard, it replaces it with one from the hardcoded list.

The Trojan selects an address from the list that most closely resembles the address it is replacing.

Both kaspersky and avira offer free CDs for scanning and removing viruses.

https://support.kaspersky.co.uk/viruses/rescuedisk

https://www.avira.com/en/download/product/avira-rescue-system

The OP of this thread had a similar virus, and some posts in it recommend using those live CDs.

https://bitcointalk.org/index.php?topic=1780068.0


Title: Re: 13JF5274VuNthhwKkLrYyZW73smjSYAEen
Post by: NorrisK on March 26, 2017, 03:28:52 PM
Also, seriously reconsider what stuff you are downloading and what you do to find out if it is secure to run.

If you contracted a trojan like this once, if you don't change your behaviour, you will likely get one again after you remove it.


Title: Re: 13JF5274VuNthhwKkLrYyZW73smjSYAEen
Post by: LFC_Bitcoin on March 26, 2017, 04:48:50 PM
If you have a moderate to large amount of bitcoin's on that computer get them the fuck out. Wipe the entire computer clean & start again or even buy a new one. Sometimes being overly paranoid is a good thing regarding bitcoin.


Title: Re: 13JF5274VuNthhwKkLrYyZW73smjSYAEen
Post by: shorena on March 26, 2017, 06:05:11 PM
If you have a moderate to large amount of bitcoin's on that computer get them the fuck out. Wipe the entire computer clean & start again or even buy a new one. Sometimes being overly paranoid is a good thing regarding bitcoin.

I am not saying this is what you suggested, I just want it to be crystal clear.

DO NOT USE THE MACHINE TO SEND ANY MORE COINS. Copy the wallet file by all means, but DO NOT UNLOCK THE WALLET on an infected machine.


Title: Re: 13JF5274VuNthhwKkLrYyZW73smjSYAEen
Post by: Mike Mayor on March 26, 2017, 07:50:02 PM
If you have a moderate to large amount of bitcoin's on that computer get them the fuck out. Wipe the entire computer clean & start again or even buy a new one. Sometimes being overly paranoid is a good thing regarding bitcoin.

I am not saying this is what you suggested, I just want it to be crystal clear.

DO NOT USE THE MACHINE TO SEND ANY MORE COINS. Copy the wallet file by all means, but DO NOT UNLOCK THE WALLET on an infected machine.

I would say take the wallet.dat just as you guys have said. Then take it to a fresh computer but transfer the wallet.dat on a USB that has been scanned and is clean then scan it again afterwards or use Dropbox maybe but don't meet the file on drop box delete it afterwards. I would format that machine. The whole damn thing. If an antivirus picks it up I would be afraid it doesn't delete all of it or it comes back one day and poof ! You just sent your money to the wrong address. :(


Title: Re: 13JF5274VuNthhwKkLrYyZW73smjSYAEen
Post by: iamTom123 on March 27, 2017, 01:55:42 AM
I have a friend who experienced the same thing a month ago. Because he did not checked the address where to send the Bitcoin, what he actually pasted into the wallet is a different wallet address which he did not know really existed. All of his Bitcoin was transferred to someone he did not know and since there is no way to recover them he just resigned to the fact that they are gone for good. I think he got a virus or something that can manipulate anytime he will use his wallet. I never realized that this thing also happened to other people.


Title: Re: 13JF5274VuNthhwKkLrYyZW73smjSYAEen
Post by: cryptocoinplay on March 27, 2017, 09:12:24 AM
Hahaha Bro This Thread is for you: https://bitcointalk.org/index.php?topic=1841658.0


Title: Re: 13JF5274VuNthhwKkLrYyZW73smjSYAEen
Post by: etherparty on March 29, 2017, 05:25:24 AM
Use a good antivirus software to clean your computer or better re-install the OS altogether.

With a clean computer and an active AV on it you should be safer.


Title: Re: 13JF5274VuNthhwKkLrYyZW73smjSYAEen
Post by: Velkro on March 29, 2017, 06:53:08 AM
So you're saying that whenever you copy an address the same address gets pasted?

That most likely means you've got a virus and you need to run some scans.
Its 100% u got a virus. Reinstall ur system entirely to be sure its safe.