Bitcoin Forum

UPDATE
The Client have been tested, and nothing wrong with that.
Look like some bastards started the panic, hoping to get some cheap yacoins from panic sales

but please be aware that software that not coming from Yacoin.org like miners, and software people have compiled them self, can indeed have bitcoin stealer, and other nasty stuff.



Hi, i am the admin at Yacointalk.com

i posted this now http://yacointalk.com/index.php/topic,26.0.html

So, what we need to state here

is it the client that steal, or is it the windows miner? or something else.
i have just sent mail to the Yacoin creator, to state if he compiled that client himself, or someone else did it.

please don't spam this tread over.

and please! post some proof of the stealing, so we can state that, this is not a campaign to shoot the Yacoin to the ground in value.

yes its scam hope everybody uninstall it for their own sake. it could steal other sensitive data.

i don't think the Yacoin funder is behind this. i think someone compiled the windows client, and added a stealer. for i don't find anything fishy in the Linux client. so don't state that to fast =)

This has a 95% chance of being bullshit, for more info : https://bitcointalk.org/index.php?topic=202078.0

Right now there is zero proof of something actually being wrong. Some people are working on finding out if some of the programs are acting fishy.

Until then, it's probably better to not spam panic-posts all over, like Mr RoyalCoin supporter (hdclover) above me has been doing. It just adds to the FUD.

Seems to be true.. My coins just gone... I have to do something! Shocked. I just have nothing to say. I was rich, now I have nothing.
 I took my client from yacoin.org

 :'(

Just installed Yacoin on one of my laptops, and bitcoin wallet, and transferes 0.01 btc, to see if they disapear. will post update

I think th eclient is safe. It probably is one of those modified miners.

Maybe this one - can somebody check it? https://bitcointalk.org/index.php?topic=200147.msg2095639#msg2095639

Yes that's my theory to. for i think there is a stealer out there, since it's alot of people posting and claim there btc i stolen.

but i don't think the Yacoin funder is behind it.

if i's the minerd tool that has the trojan it in, it could come from this here, This is where the first minerd client was made for yacoin https://bitcointalk.org/index.php?topic=199517.0;all

Can you please provide some kind of proof of the stealing =)?

maby som screenshots of the client, transaction, and compare it to blockcain  :)

hmm would't the reporting of stealing begun earlier then?

Damm - I am running that too. The stealer is welcome to my Bitcoin wallet as  I transferred out all of them.

Is it just Bitcoin wallet it is after? My FTCs are fine. Don't fancy installing the OS.

i done some testing, and the client seems fine, just updated the post on yacointalk.com.

still going to test all the miners to see.

but for now, this seems like a campain to lover the price of yac, to earn some cash from panic sales =)
so look after people buying large amount of yac now, and you will probably find the man/woman behind this scare tactic.

(the win32 binary downloaded soon after release)

tested under a VM for ~30minutes.
no read operation toward bitcoin wallet yet.
and no dns request to the suffix yet.

although the motivation to release yacoin is still highly suspicious.

is client needs to be running or it just need to be run once, and infect the system?

I've dealt with hdclover on the 9.5.13 selling him YACs. He was desperate to get more.

Anyhow I have checked the BTC address he sent my payment from and there is nothing missing. So either hdclover had a different wallet.dat corrupted or did not lose anything.

Anything else, make your own conclusions. And feel free to repost that to the other posts he did.

Malwarebytes has been blocking a lot of attempted access to my cnc, btc and yac wallets.  This all started happening when I started mining yacoin.  Does this mean my system is infected?  I did a scan and it found two infected files, "cgminer.exe and minerd.exe".  I deleted both but still getting notification about block attempts to my wallets.

Nothing is missing yet from my wallets.  I would hate to reinstall the OS.  Any other apps to remove malware/trojan?

http://googlevoice.com/images/malwarebytes-quarantine1.png

http://googlevoice.com/images/malwarebytes-log1.png

tb

Sounds like CPUMiner, as we'd been suspecting. Where'd you download it from?

The only way to be 100% safe after being exposed to malware is a complete drive reformat and OS reinstall. The malware probably isn't that sophisticated, though, so removal is probably sufficient.

Really!? are you kidding me?

You aren't aware that mining software gets flagged by almost every av/malware scanner out there?

*facepalm*

Those malware programs flag cgminer as a virus as well..  It's a false flag because they are an app that mines innocently but because of the other viruses that mine.  Why do you have a minerd.exe in your Litecoin AppData folder?  That shouldn't be. 

I installed Yacoin on many computers and didn't see anything unusual or bitcoins stolen.

FUD.

lol fake screen shot with app litecoin in it :) well maybe some one can make a list of this fudders and post them in 1 thread :D

Because I'm still a noob.  At least now I can ignore the log and keep on mining.   ;D

tb