Bitcoin Forum

Economy => Scam Accusations => Topic started by: busminer on October 23, 2018, 12:02:42 PM



Title: Virus in wallet, new coin ann
Post by: busminer on October 23, 2018, 12:02:42 PM
virus in wallet here in ann https://bitcointalk.org/index.php?topic=5055752.new#new
https://threats.kaspersky.com/ru/threat/Backdoor.Win32.Androm/


Title: Re: Virus in wallet, new coin ann
Post by: LoyceV on October 23, 2018, 12:10:54 PM
User HardZix has opened 5 ANN threads (https://bitcointalk.org/index.php?action=profile;threads;u=378474;sa=showPosts) in total. I can't check/confirm the virus warning, but I can see he instantly removed the warning from his self-moderated topic.

I'm willing to tag him, but would like to see conclusive evidence first. Is there a site where I can upload a Windows file for virus scanning?

Update: He has deleted many posts:
Code:
busminer
121232
47185420
<a href="https://bitcointalk.org/index.php#6">Alternate cryptocurrencies</a> / <a href="https://bitcointalk.org/index.php?board=159.0">Announcements (Altcoins)</a> / <b><a href="https://bitcointalk.org/index.php?topic=5055752.msg47185420#msg47185420">Re: [Pre-ANN][VKT]VEKTOR[POW/POS] NO ICO or Premine</a></b>

<span style="color: red;"><span style="font-family: Verdana;"><span style="font-size: 10pt !important; line-height: 1.3em;">VIRUS IN WALLET, DONT DOWNLOAD IT !</span></span></span><br /><a class="ul" href="https://threats.kaspersky.com/ru/threat/Backdoor.Win32.Androm/">https://threats.kaspersky.com/ru/threat/Backdoor.Win32.Androm/</a>


asiapool.trade
2223023
47185422
<a href="https://bitcointalk.org/index.php#6">Alternate cryptocurrencies</a> / <a href="https://bitcointalk.org/index.php?board=159.0">Announcements (Altcoins)</a> / <b><a href="https://bitcointalk.org/index.php?topic=5055752.msg47185422#msg47185422">Re: [Pre-ANN][VKT]VEKTOR[POW/POS] NO ICO or Premine</a></b>

&nbsp;<img src="https://bitcointalk.org/Smileys/default/smiley.gif" alt="Smiley" border="0" />


busminer
121232
47185477
<a href="https://bitcointalk.org/index.php#6">Alternate cryptocurrencies</a> / <a href="https://bitcointalk.org/index.php?board=159.0">Announcements (Altcoins)</a> / <b><a href="https://bitcointalk.org/index.php?topic=5055752.msg47185477#msg47185477">Re: [Pre-ANN][VKT]VEKTOR[POW/POS] NO ICO or Premine</a></b>

<span style="font-family: Verdana;"><span style="color: red;"><span style="font-size: 10pt !important; line-height: 1.3em;"><span style="font-size: 10pt !important; line-height: 1.3em;">VIRUS IN WALLET, DONT DOWNLAD IT !<br /></span></span></span></span>


busminer
121232
47185481
<a href="https://bitcointalk.org/index.php#6">Alternate cryptocurrencies</a> / <a href="https://bitcointalk.org/index.php?board=159.0">Announcements (Altcoins)</a> / <b><a href="https://bitcointalk.org/index.php?topic=5055752.msg47185481#msg47185481">Re: [Pre-ANN][VKT]VEKTOR[POW/POS] NO ICO or Premine</a></b>

<a class="ul" href="https://threats.kaspersky.com/ru/threat/Backdoor.Win32.Androm/">https://threats.kaspersky.com/ru/threat/Backdoor.Win32.Androm/</a>


olkah
881806
47185529
<a href="https://bitcointalk.org/index.php#6">Alternate cryptocurrencies</a> / <a href="https://bitcointalk.org/index.php?board=159.0">Announcements (Altcoins)</a> / <b><a href="https://bitcointalk.org/index.php?topic=5055752.msg47185529#msg47185529">Re: [Pre-ANN][VKT]VEKTOR[POW/POS] NO ICO or Premine</a></b>

<a class="ul" href="https://www.virustotal.com/ru/file/9d809f1d55c16ec9b8f410a358c351577ecb85b768b8237ce975f8468fe0652a/analysis/1540295929/">https://www.virustotal.com/ru/file/9d809f1d55c16ec9b8f410a358c351577ecb85b768b8237ce975f8468fe0652a/analysis/1540295929/</a>


busminer
121232
47185569
<a href="https://bitcointalk.org/index.php#3">Economy</a> / <a href="https://bitcointalk.org/index.php?board=83.0">Scam Accusations</a> / <b><a href="https://bitcointalk.org/index.php?topic=5055759.msg47185569#msg47185569">Virus in wallet, new coin ann</a></b>

virus in wallet here in ann <a class="ul" href="https://bitcointalk.org/index.php?topic=5055752.new#new">https://bitcointalk.org/index.php?topic=5055752.new#new</a><br /><a class="ul" href="https://threats.kaspersky.com/ru/threat/Backdoor.Win32.Androm/">https://threats.kaspersky.com/ru/threat/Backdoor.Win32.Androm/</a>


olkah
881806
47185612
<a href="https://bitcointalk.org/index.php#6">Alternate cryptocurrencies</a> / <a href="https://bitcointalk.org/index.php?board=159.0">Announcements (Altcoins)</a> / <b><a href="https://bitcointalk.org/index.php?topic=5055752.msg47185612#msg47185612">Re: [Pre-ANN][VKT]VEKTOR[POW/POS] NO ICO or Premine</a></b>

<b><span style="font-size: 30pt !important; line-height: 1.3em;"><span style="color: black;">VIRUS 100%<br /><a class="ul" href="http://prntscr.com/l9f51e">http://prntscr.com/l9f51e</a></span></span></b>

Update: I've posted this (https://archive.is/Y9GGG#selection-2101.0-2101.6) in his thread.


Title: Re: Virus in wallet, new coin ann
Post by: coinlocket$ on October 23, 2018, 12:16:39 PM
User HardZix has opened 5 ANN threads (https://bitcointalk.org/index.php?action=profile;threads;u=378474;sa=showPosts) in total. I can't check/confirm the virus warning, but I can see he instantly removed the warning from his self-moderated topic.

I'm willing to tag him, but would like to see conclusive evidence first.


On every thread we have links for "download" wallets. (most likely malware IMHO)
A newbie asking to install 5 differents wallets with no explanations and links about the project is a big red flag to me.

Edit also, untrusted feedback

https://puu.sh/BPDFb/6604340041.png


Title: Re: Virus in wallet, new coin ann
Post by: LoyceV on October 23, 2018, 12:21:40 PM
On every thread we have links for "download" wallets. (most likely malware IMHO)
A newbie asking to install 5 differents wallets with no explanations and links about the project is a big red flag to me.
Agreed. But I don't leave red trust based on red flags, I leave it on smoking guns :D

Quote
Edit also, untrusted feedback
I saw that, but from a user with no posts.



I've downloaded this file (https://archive.is/Y9GGG#selection-585.0-591.4) and sent it to https://www.virustotal.com for testing. It shows this:
http://i66.tinypic.com/2uhnyc8.png

Virus explanation:
Once infected, it will change your computer setting by changing the registry entries and startup items. When you start your computer, it will run itself automatically at the background. By taking up a lot of system resources, your computer performance will be very slow. It will add its malicious file on your computer. You will find there are a lot of unwanted shortcuts and icons on the desktop.

HardZix answers this:
All claims will be resolved soon, thanks
That's not enough, so I'll tag him.

Further quotes for my Reference link:
]VIRUS IN WALLET DONT DOWNLOAD IT !
https://threats.kaspersky.com/ru/threat/Backdoor.Win32.Androm/
https://www.virustotal.com/en/file/b7fe6e0b1a26c68ab63cde8a9d7336925975493229aaf66a115f0756225b13c6/analysis/1540297688/
warning


Title: Re: Virus in wallet, new coin ann
Post by: busminer on October 23, 2018, 12:29:02 PM
someone get infected ...
https://bitcointalk.org/index.php?topic=5055752.msg47186080#msg47186080


Title: Re: Virus in wallet, new coin ann
Post by: marlboroza on October 23, 2018, 12:36:13 PM
There is link to download zip file in his thread. What to say:

https://i.imgur.com/SsVJfh3.png

OP just report them to moderator, they will permaban user in no time.


Title: Re: Virus in wallet, new coin ann
Post by: hilariousandco on October 23, 2018, 12:54:38 PM
Banned. Locked the threads as well.


Title: Re: Virus in wallet, new coin ann
Post by: busminer on October 23, 2018, 12:58:18 PM
Banned. Locked the threads as well.
hilariousandco
Thank you
and he did negative feedback for me )))
https://picua.org/images/2018/10/23/a379d51318bdd7d2f82597d42ffd6519.png


Title: Re: Virus in wallet, new coin ann
Post by: busminer on October 24, 2018, 01:04:43 PM
today we have a new one with virus in wallet https://bitcointalk.org/index.php?topic=5056434.0