Bitcoin Forum

As the Dev of DarkChain deleted his topic shortly after it was discovered that the wallets have been swapped out with infected ones which inject a Trojan into your system, i've started this topic.

Make sure you DISCONNECT INTERNET when you've installed the DarkChain wallet and let every virus scanner run over your PC.

Its probably the best to move all coins away from your PC, Format it and reinstall Windows then.

The next Virus-Scam is probably already coming, be warned and do not trust newbie devs which Announce coins without any new features, no real ann topic and no POD.

thanks for warning  , people pls attention

I was telling everyone to ask for PoD before mining.But most of them were even skeptical about PoD and called me FUDDER !

@ Cryptopromotions - Dude what happened with your scam coin promotions?

Thanks for the info ocminer, spread the word, guys. Some people are probably still mining this, blissfully unaware.

Jesus, guess I mined 2/2 scamcoins. Good on me.

+1 Ocminer , i just deleted the pool for this scam coin

I think this guy tried to log into one of my accounts


The IP is
185.44.77.164

Out of curiosity, what was the Trojan name?

let's against scam coin ,clean the world , peace

It is going a little far the few people we let over and over again try to scam this community. It's getting rather tiresome.

my BTC wallet disappeared i had in 0.00017235 BTC lol and it was encrypted

and my C-CEX account is under attack, 5 times in a roll someone try to log in

The reason you should have 2FA on all your trading accounts. If you were a victim of this, I hope you had 2FA enabled. If you were not a victim, go enable 2FA on every single trading account you have.

Trojans can also steal wallet.dat files. Make sure you encrypt and backup your wallets.

If you are like me, you would be using a VM for trading and wallets. Keeps your main PC secure that way.

 I initially walked away from this one and greed brought me back.
Oh well, good excuse for a beer in the morning.

It's very sad to read this, it is getting awfully stupid with the constant script kiddies scamming people all over the place.
I've shut down the darkchain stratum only the front end will remain for people who're interested in withdrawing, for whatever that's worth...

I lost half a bitcoin and all iocoins after installing this wallet.

Why do people even bother with these obvious shitcoins to begin with?

Do the crypto world a favor and focus on the top 50 coins already in existence.  No more are needed.  All people are doing is spreading capital to a bunch of worthless coins lowering the value of coins that actually might have a future and have people involved that are actively working on the coin.

There are currently 471 coins listed on coinmarketcap and it's fitting that pennies is #471.  If this bullshit continues then all coins will be worth no more than pennies.


It's obvious that 99% of these 1 post devs launching a new coin is scamming.  If you're too stupid to see that then you deserve to get a virus and lose all your btc and other coins.  Hopefully you'll end up losing enough to make you just leave the cryptocurrency world because your stupidity is destroying it..  Too many idiots jumping from scam to scam hoping to get rich but never will.  Mining coins simply because they like the name or logo.  I've never seen so many complete morons as I have in the eight months I've been involved in cryptocurrency.  And I did desktop support for years before I moved on to higher level positions.  I thought I would never see more idiots than I did doing that job.  The altcoin world changed my mind about that.

I think its time that users better boycott all the new coins from newbie accounts or without PoD . Such wallets shouldn't be installed at first place but even if someone wants to try these then better try them in virtualbox or vmware , otherwise you can only blame yourself.

on every new coin i'm writing about PoD but nearly everyone are jumping against me, i hope those people got burned too...
We should organise scam hunting team

Why in the fuck are you here then you pos. move on.. unless you just want to Troll the unfortunate. begone asshole.

what date was the wallet with the virus released?

If your still using windows and installing new coin wallets I don't know what your doing....   I just keep coins in the pools, its much safer. 

that is stupid. what happens when the pool keeps your coins and disappears. Its happened with pools before.

next time use sandbox, or a different machine

Its much safer to risk losing a crap altcion then all your coins and risk a keylogger also costing you all you accounts!

You're obviously one of those people that I am talking about.  Maybe you need to find another hobby.

I'll not do a damn thing you say including moving on.  I'm here posting and there is nothing that you can do about it.  Besides, I could care less what you want me to do in the first place.

Now go run along and play little boy.

EDit:

I forgot to mention.  These unfortunates that you speak of are just as much to blame as the scammers that scam them.  It takes two to tango.  Anyone still ignorant enough to blindly follow all these new daily shitcoins should move on.  The only thing they contribute is btc to the scammers anyway.  Take away the scammers source of btc and the scammers will find somewhere else to scam.  You guys are helping to perpetuate the scams by letting yourselves be scammed.

Begone troll.

Had a bad feeling about this one.  Glad I avoided it.

Norton 360 I have found works the best.

You can call me a troll all you like.  The point is that people like me make money in crypto and people like you don't.  Now go play with your dolls little girl.

another shit is coming up ;D ;D ;D ;D ;D
https://bitcointalk.org/index.php?topic=765643.new#new

promising a lot of those  ;D ;D ;D ;D

http://i.dailymail.co.uk/i/pix/2013/11/21/article-2511211-198E823D00000578-55_634x635.jpg

Thanks for the warning !

As posted by other indeed better to avoid "newbies" with some copy and paste coin.
Use https://www.virustotal.com/
You can uload the file you want to use and it will be scanned by most if not all known virusscanners.

w00t bitches covered in money!! I'm there!


thanks for the heads up oc 8) I thankfully missed this one.

we really could do with a coin scam warning thread maintained by someone well known and trustworthy

It sounds like you are scaring people towards your scam coin.

Was this a case of  more than one dark chain wallet being released?
Or was it in every wallet because my total virus scan came back negative for anything harmful.

anyone with half a brain will encrypt their stub so that it will remain undetected by av software. Saying a wallet is clean because you scanned it with virus total/norton/eset is wrong. In a community like this its best to assume all coins have keyloggers and sandbox the wallets or keep your funds at the pool.

Does the trojan still affect people who build from source?

OP released a legit wallet for a short time period , then probably switched the file in the download link shortly after. Assholes saying your dumb to mine new coins, the comments about how others are dumb just show how totally retarded they are. You roll the dice if you want to hold new wallets on your computer. I sent the file to virustotal also, and it showed no virus. it installs something after executing. someone mentioned something about xsandbox.bin being installed in the svchost file on your computer. very covert stuff I guess. malwarebytes found it on my computer, but it was too late, the keylogger must have logged some passcodes I had and the dirtbag OP took advantage of that. be safe be aware.

Looks like I'm reformatting.
Thanks for clarifying.

he's right, people need to just fucking quit mining this garbage. your not making money your just enabling these fuckheads to continue. just stop supporting them and its done.

I reverse engineered the file in the original thread.  It used the xsandbox.bin and pushes its own svchost.exe, rar.exe, cmd.exe and a few others.  Most of was encrypted and I only see the original .exe binary files but it was pretty bad.  Appeared that each file was to do its own thing to make it easier to sort through what the hacker receives, ie one or keylogging, one for wallets etc

Added a link to this thread to my signature so hopefully more people see it...

Well this sucks.  I rented for this one and mined a little over 14k of these at a cost of .2btc.  Not a huge loss, but it still makes me sad.  I guess there's no point in trying to resuscitate this thing or salvage any value out of the coins.  It is becoming too much of a crapshoot lately.  It seems the new thing is to start off with low-info ann's and then "surprise" all the cool stuff drops, and there is no way of knowing which type it is unless you're on the inside, so you're stuck throwing darts at every coin that comes along and seeing what sticks, at least if you're into launch mining.

QFT

Took the words right out of my mouth.
Like betting at the roulette tables.

Edit: I mined a little over 200k rofl.

For example, any program running in the default Sandboxie box has access to your wallets folders and to clipboard.
Best way is a different physical machine or virtual machine without access to host clipboard (or you should use something like KeePass 2 with obfuscated auto-type).

It's not a panacea. Check this link: virustotal (https://www.virustotal.com/en/file/6b1f9c129d06fc010850c6a44ec443b4435735722cfd4fe271737f1ab4f7e90a/analysis/).
But it's a malware - infected wallet which steal others wallet.dat from a computer.

I recommend: encrypt your wallets, use a password manager (I recommend KeePass 2 with enabled options: obfuscated auto-type and secure desktop for master key), a separate physical OS for trusted sites and wallets and a HIPS in the manual mode ;D.

Happened to Portcoin yesterday.

Sorry to hear about this scam. I just read about it on, bittrex's post. One thing is most people have been scammed and keep going to more scam coins. Prime-XI is an X11 coin, that went 45 days without an exchange, to prove its not a scam and to show how dedicated it is to stay for the long term for the community. New projects are coming out, that help the dedicated miners or traders financially. Its fair from the start, the yearly PXI is the same for 19 years. Meaning that its never to late to start mining. We just got listed on crypto-trade this weekend, and we are very excited, and wish new comers to join.

new one is coming up, when i try download POWCOIN wallet
https://bitcointalk.org/index.php?topic=762335.msg8592888#msg8592888 (https://bitcointalk.org/index.php?topic=762335.msg8592888#msg8592888)
i just got this
http://1.bp.blogspot.com/-QNkY_u9XmsY/VAbTGSfXfAI/AAAAAAAAB54/qP3Rr05kTzI/s1600/avira%2B.jpg
VirusTotal (https://www.virustotal.com/en/file/e762e90ab57025da2d9255df9e83457037f9fc80e0cce98c9e1f372804b103eb/analysis/1409735766/)

beware you are warned!


in bleutrade.com in the chat a man called cleavage was offering me to download the wallet and vote against 2k per vote  from the chat history:
"cleavage: download wallet here http://bit.ly/POWqtWallet
cleavage i got another link if u want
cleavage ive had no issue or complaints"

after i wrote in the chat that the wallet is virus he didn't respond anymore

so many scam , they have no new idea to scam people so use Trojan/Virus  want steal directly?

i'm going to make a Scam coin hunters thread  ;D ;D ;D

damn, so many scam coins. I remember when it was just a handful of coins here and the market was moving much faster.

I guess behind this Virus/Trojan stuff is always the same person as the coins/anns all look similar and the virus/trojan also is always the same...

Good question how much money he made with that..

But there are some sites that don't have two factor authentication system..how do I secure those?

maybe they want to steal people's btc from their pc?

Correct, This is what they are doing constantly

Damn, scam coins left to right...

WARNING:

The new DizhuCoin is the same as the DarkChain Virus:

Look here, seednodes are the same:

https://github.com/search?q=%2246.183.221.71%22&type=Code&utf8=%E2%9C%93


DO NOT DOWNLOAD !!!!!!!!!!!!!!!!!!!!!!!!

GFY !

The Dev now deleted the node from the repositories but I've made a screenshot here:

https://i.imgur.com/ijBONgu.png

these scammers are wrong, but you are not part of the solution, you are just a smug piece of shit if you ask me. GTFO ASSHOLE

READ WHAT YOU JUST WROTE AND TRY TO TELL ME YOU ARE A GOOD HUMAN BEING LOL

a new scammer like a  DarkChain congratulations https://bitcointalk.org/index.php?topic=767899.msg8692712#msg8692712