Bitcoin Forum

Bitcoin => Electrum => Topic started by: Cereberus on May 13, 2017, 06:24:36 PM



Title: Should I be worried ?
Post by: Cereberus on May 13, 2017, 06:24:36 PM
I logged on teamviewer on my PC to check the PC of my friends which we build just a few days ago, I did change the algorithms of mining in Nicehash there from Zcash to Ethereum as it was the most profitable one. When I opened Electrum soon after it brought up the window how would you like to connect, I choose auto connect then I saw the recent wallets opened only the default_wallet. I checked with open file and all wallets were there, check the balances and everything were there. Only the appearance has changed to mBTC as unit and the addresses tab I had to click on all other wallets. I have AVIRA PRO on guard as I am worried after reading the news that 300 countries on the world being hit by the nasty ransomware.

Should I be worried ?


Title: Re: Should I be worried ?
Post by: BitcoinNewsMagazine on May 13, 2017, 06:37:04 PM
Having any remote connect enabled is a security risk. Malwarebytes pro has already let their users know they are protected.


Title: Re: Should I be worried ?
Post by: Cereberus on May 13, 2017, 06:42:37 PM
Having any remote connect enabled is a security risk. Malwarebytes pro has already let their users know they are protected.

Malwarebytes is a joke and it cannot protect you from the latest ransomware. Actually all my files are clean and everything looks ok but why electrum changed everything as if it was the first time I would connect to it. Anyway I make a withdraw from Poloniex and the money come in without problems. The PC which I connect to has nothing installed except Nicehash miner and I build that PC from the very scratch so I don't think it is leaking security there. No one is on the other side of the PC, my friends have let it open so I can check how the mining is going.

Maybe is something that has to do with electrum but what ? Should I move all the coins to one address of my hardware wallet (I really don't want to for the moment) ?
 


Title: Re: Should I be worried ?
Post by: kolloh on May 13, 2017, 10:29:19 PM
It sounds like the config file was regenerated but not sure why this would happen unless it got corrupted somehow. Doesn't really seem like any sort of attack to me.