Bitcoin Forum

I have Bitcoin core loaded and 5 bitcoins in the Bitcoin Core wallet.  Passwords kept offline.  I was updating the blockchain and my computer got hacked.  My balance now says 0 and unconfirmed says 5.  Here are my questions

1) Are my coins actually gone or can I still recover them if they are "UNconfirmed"
2) I have several hundred lightcoins and I would like to know what precautions I need to take to  stop from having those stolen if I try to update the lightcoin block chain

Thanks

John K

Keep calm, can you post one of your bitcoin address? So we can examine better the situation, thanks.


PS: you should remember that if one transaction has received at least 1 confirm it is impossible to 'chargeback' it, due the irreversibility of this technology.

By updating the blockchain you mean...?

As long as the wallet.dat is encrypted and the password is reasonably strong you have nothing to worry about for now. Dont use the wallet on the infected machine ofc.

how do I locate an address? 

At 'Receive Coins' you'll find your addresses.

Have you open/decrypt the wallet in that computer?

Thanks so much for your help

At "recive Coins"  it only showed one address  (Below)

17SZMZY1N7ZQBR55Xn9DuSPMtmxsVgJfY4

It did not list the five bitcoins separately.  The wallet previously said "Balance" 5  it now says Balance 0

Also...not sure what you mean by  "Have you open/decrypt the wallet on that computer"

If you did so, your password could have been capture by a keylogger.

Your address has 1 bitcoin, last transaction out was 8 bitcoins distributed in 2 addresses:

https://blockchain.info/address/17SZMZY1N7ZQBR55Xn9DuSPMtmxsVgJfY4

Last transaction included in the block 273390 with this timestamp: 2013-12-06 13:41:25  so it is not this the correct address.

All I know is the balance was 5 and now its 0....if I open up the lightcoin wallet the balance is 147.....so Im reading the balance correctly.  Something has changed within the wallet.  The unconfimed number is 5.......SO.......are they gone.......?  and how do I get the other lightcoins off of my computer without having the same thing happen to me

Are you able to take a screenshot of your wallet and post here?  Use http://imgur.com to upload screenshot

Is Bitcoin Core already synced with the network?

If 1PyQYiNNCD5B19UDxuTQf4x6qodk83rHy is a change address you have 5 bitcoins, but I believe if that was so you should see the address in 'Receive Coins' tab.

The transaction is confirmed since 2013...

I guess his client isn't synced completely and showing 5 BTC unconfirmed

Screenshot of Bitcoin Desktop (It used to say Balance 5)

http://www.screencast.com/users/kirwin2009/folders/Default/media/50c2fdac-bcf1-460e-8aec-6ce4734ef8e1


Bitcoin Receive section

http://www.screencast.com/users/kirwin2009/folders/Default/media/78e901e5-41f9-4d3d-a934-f4d20771c621


Firewall Warning (NOTE  This starts popping up about 1 minute after I open the utility and it starts to download the blockchain)

http://www.screencast.com/users/kirwin2009/folders/Default/media/cb7060fa-9e4b-4cdf-aee4-b4512b7c770c  

The coins have been sitting in this wallet unued since 2013....no activity.....I just recently decided to move them to a different computer so I need to download the latest blockchain so I could prosess a transfer.    During the downloiad I got hacked.....the download never completed and I did not try to make a transfer

I think you sent 4 btc to your change address 1PyQYiNNCD5B19UDxuTQf4x6qodk83rHy when you sent 4 btc to btc-e back in 2013. Those 4 btc change hasn't moved since. Your coins are still in your wallet, they are not showing because your blockchain is not up to date. Wait for the blockchain to download and you should see 5 btc confirmed.

As I said   It was updated in 2013  and it has shown the balance to be 5 since that  time.  I am absolutley sure of that.  within the last week it went from 5 to 0. 

Im Not sure what to do next?

Are they actually gone if it says 5 unconfirmed or are they gone

WHat steps do I need to take to get the lightcoins off this computer without losing those

ie

1) Run Malware as you suggested
2) Make sure firewall is upto date
3) ????????

 

Looking at your screenshots, it seems that your client has not synced yet. It is updating the balance as it syncs and it has only synced up to December 2013. Wait until the red "out of sync" message next to where it says "wallet" and "recent transactions" to go away. Once that is gone, Bitcoin Core should be fully up to date and you will see how much you actually have.

You should allow the connection to your computer if someone is attempting to connect to Bitcoin-qt or Bitcoin core. This will allow you to be connected to the network and sync the blockchain.

1. As knightdk said, Just sync your wallet and you'll be fine, your bitcoins are not lost.
2. You don't need to do anything to keep your litecoin's safe as you are running OSX and it doesn't gets infected with malware easily.

How did you move the coins?

Did you use the backup when you first installed the client or you used a backup made after all those transactions? Do you still have access to the previous wallet?

You may have lost the change address, if so, 4 bitcoins are lost.

To 'move' your litecoins you just need to backup your wallet.dat, it's exactly the same as bitcoin.

https://en.bitcoin.it/wiki/Data_directory

First of all calm down. Your coins are not lost and you don't have to do anything except wait for the wallet to syncronize and download the whole blockchain. If you're in a hurry you can use dumpprivkey console command to export the private keys of the two mentioned addresses.  

Why not give Electrum a try? You don't have to download the whole blockchain and wait to sync. Or you can split the amount and use them both.

This is likely the most important part.  HOW did you "move them to a different computer"?   Did you copy only the one private key or the entire wallet.dat?

Also, do you still have access to the old computer?  If so, (and if what you are saying is accurate), then in all likelihood all the private keys needed to access all your BTC are in there.  You can export ALL the private keys from there and import them elsewhere.

Likewise for Litecoin  (Lite not Light), you should copy your wallet.dat over.

The good news is that it seems extremely unlikely you got hacked since the coins have not moved in 18 months.  ;-)

I am returning to this thread because I still have a problem.  Its now worse.  Please see thread for details.  The screen shot below shows the error message that I am now getting.  After my last conversation I went to update the blockchain and after I left it for a while Bitcoin stopped working.....all the while I was getting error message that computers were trying to access Bicoin (Hack attempts)

Now I cant open the Bitcoin Core Software.......

See error message

http://www.screencast.com/users/kirwin2009/folders/Default/media/f7f8d3c3-917c-4746-ac0c-6edd69a52fb2

Any suggestions

Can you post a screenshot about these messages about hack attempts? These are probably not hack attempts but rather Bitcoin Core attempting to connect to the Bitcoin network. These messages are probably from your firewall, and you must let Bitcoin Core through the firewall in order to connect properly to the network.

Here ya go  thanks for your help

http://www.screencast.com/users/kirwin2009/folders/Default/media/cb7060fa-9e4b-4cdf-aee4-b4512b7c770c

That is not a hacking attempt, that is a node on the Bitcoin network trying to make a connection to your node. You should click "allow" so that you have a connection to the Bitcoin network and can fully sync the blockchain.

Great.....!but I still cant boot the program....I get the error message (See screen shot in last message)....how do I get the software to open....

Can you post a screenshot of the report when you click report?
I think the solution would be to just reinstall Bitcoin Core. Reinstalling will not delete the blockchain you already downloaded previously, nor will it delete your wallet. Just to be safe though, before reinstalling, copy the wallet.dat file to a safe location.

Disable the anti virus completely. The IP address was a full node which is required for syncing. Anti virus are known to block any connections to the computer.

You can backup the wallet.dat, perform a fresh install of Bitcoin core and let the synchronisation process complete. Then copy the wallet.dat once the client is synchronised and check your balance.

I would suggest:
1) If you know enough about your OS to do a low level file search, search for wallet.dat
2) If you know enough about bitcoin-qt to determine which of the wallet.dat files is correct, copy that one to backup.
3) If you know enough about partial nodes like Multibit or bitcoinJ, try importing your backed-up wallet.dat into one of those.

partial node programs will sync with the blockchain many many orders of magnitude faster.  Minutes -vs- days.

Thanks to everyone for all your help so far....In my saga I am now trying to reload Bitcoin core....however....I cant.....I downloaded the latest version from Bitcoin.org....but when I try to load it....I am getting the same error message....see screen shot below

http://www.screencast.com/users/kirwin2009/folders/Default/media/64ea6c42-6f55-40b7-8dd1-b3ed8c517465

I even tried deleting the old version by dragging it into the trach and then reloading but I got the same error message  ....if I do a search using the hour glass in the top right for wallet.dat.....I find nothing......I did back up wallet.dat to a flash when I first did this so I have it


 How do I get Bitcoin Core to reload....so I can open it?

Thanks

If you know how to start a shell, you could try to see if bitcoind or bitcoin-cli will work.  If you can run those, then you can still export your keys through there.  This will likely be more entailed and less point and click than bitcoin-qt

http://www.screencast.com/users/kirwin2009/folders/Default/media/64ea6c42-6f55-40b7-8dd1-b3ed8c517465

HI

I still can not get bitcoin core to update the block chain. I cannot get Bitcoin Core to open. 

 I tried to reinstall and I got the same error message (See screen shot) 

Finally....I have deleted bitcoin core and reloaded the bitcoin core program from bitcoin.org

I had to install the version  "2015-05-19 - Bitcoin Core version 0.10.2"

The newer version would not work because it said my Mac software needed to be newer

I have Mac version 10.6.8

After deleting the bitcoin core and reinstalling it...I still get the same error message

I cannot open the program

I HAVE THE COIN DATA BACKED UP AS A .DAT FILE....CAN I TRY LOADING A DIFFERENT PROGRAM AND OPENING THE COINS IN THAT OTHER PROGRAM EVEN IF THEY WERE CREATED/BACKED UP FROM THRE BITCOIN CORE PROGRAM?

JOHN KIRWIN

That might be the problem. You are using an old unsupported os.

Yes. You can import the wallet.dat file into blockchain.info's web wallet and perhaps other wallets too. However, if you do that, I would recommend that once the wallet is imported, to move all of the Bitcoin to a new wallet and not receive any Bitcoin on addresses from the old wallet.

Are you able to recommend a different wallet?

MultiBit and Electrum are two very good wallets. They use SPV so you won't have to store the entire blockchain on your computer.

Bitcoin Core 0.10.2 works without any problems on Mac OSX 10.6.8.

The "quit unexpectedly" error is for sure not caused by the combination of software. I've been running this version of OSX and various version of Bitcoin on many Macintoshes without a problem. The only problem that I had with this combination was related to the bad disk drives that kept passing various Apple diagnostics until I grew suspicious and booted Debian Linux and run its diagnostics (badblocks).

Hi

I just tried to do a work arouind and load Multibit HD instead of Bitcoin COre....I got the same error message  "....can't use this version of Multi bit with this version of Mac......I ran the Mac updates but its not updating to the newest version.....I dont understand the last post....so what do I do????

You either need to use older versions of the software or change your OS. You could upgrade to the latest version of OS X and all of the current software should support it. Or you can install a different OS such as a distribution of Linux or a copy of Windows.

The last post was discussing hardware issues. Since Bitcoin core is very hardware intensive, it is a good test of whether your hardware is failing or not. Apple has diagnostics to check your hardware, but you should also use other tools to check also. 2112 used diagnostics from Debian due to his suspicions of hardware failure.

Hi  Stlll having trouble...I updated my OS X to Yosemite and loaded Multibit HD....I was hoping to restore the .dat files I have on a flash drive that were created in Bitcoin Core....However....Multibit is requireriung "Wallet Words" to start the restore process so I can import my coins from my flash.....Problem is I don't have any wallet words.....I only have a password for those coins.   How do I do a restore if I don't have the wallet words it is requesting.  I never made any wallet words

MultiBit is annoying in that you can't import private keys from other wallets. It also can't read from a wallet.dat file. Instead, make a blockchain.info account and import the wallet.dat file there. Then send all of your Bitcoin to an address from MultiBit. The "wallet words" are the seed phrase it uses to deterministically generate addresses.

Hi  Thanks for your help......isnt there a different utility that will allow me to import the .dat file?  This is all very overwelming to me and Im trying to make this as simple as possible

Thanks from a newbie

Unfortunately there is no easy way to convert wallet.dat files to multibit wallet files.

Have you tried Bitcoin Core on Yosemite yet?

Hi Thanks for your help.

Unfortunatley, (as outlined in my string)  I have been through a long saga with Bitcoin Core....Can get it to open, can't reload it.  Finally deleted it and reloaded it and I still get the same error message.  I have upgraded my OS X to the latest operating system and have finally tried changing to Multi bit HD  Unfortunately they require some words to restore an existing wallet which I never created so I was told "go make a blockchain.info account and then transfer....Instead of having to do that.....

Is there any other utility that will allow me to open a .dat file (created in Bitcoin Core) that will not require secret words and any intermediate steps?

Thanks in advance

John

You could try pywallet. It allows you to see the stuff inside a wallet.dat file. You can get the private keys out of the wallet and import it elsewhere. I would recommend that you use Electrum as a wallet. It works well and allows you to import private keys which MultiBit does not allow. You can find pywallet here: https://github.com/jackjack-jj/pywallet

your bitcoins are safe.. it's seems to  be a  btc core  sync issue.. as you show them as unconfirmed.

may be you should to change your pasword in wallet blockchain,
and or you back up your wallet. or you can update your smadav, avira or the other guys.

Someone please change the subject to:

I am trying to open(import) my wallet.dat file that is backed up onto a flash drive and can't see how to do it
1) I created the wallet.dat using Bitcoin core on a Mac
2) Long story short....I have been unable to open Bitcoin Core on my Mac (Error message is " Bitcoin Core has closed unexpectedly")
I have tried everything (Unistalling included)
3) Now I am trying to open my stored Bitcoins on a different computer that is windows based.

Can I open a backup that was created on Mac in a windows environment

If Yes....How do I do it...because I am a newbie and I don't see a restore backup or even an open option within bitcoin Core that I have successfully installed and opened on my windows computer?

Thank you

Yes, you can.

Go to the data directory (https://en.bitcoin.it/wiki/Data_directory) and copy the wallet file to there. If a wallet file is already there, you can delete it if it doesn't have any bitcoin. Otherwise, just rename any existing wallet file and copy it to a safe place. Then start up bitcoin core and it should have all of your bitcoin there.

Its not working.  I went to Start and put %APPDATA%\Bitcoin in the field and nothing comes up   "No items match your search"

I have folders set to show hidden folders

I have Bitcoin core loaded on the computer...not open  but the blockchain is not updated.  Does that matter?

If I go down the tree there is no Bitcoin folder under C:Users/USerName/Appdata/Roaming/Bitcoin

Any ideas why I can't see it

Thanks so much

Open Windows Explorer (the file explorer) and type in %APPDATA% into the bar at the top. If you scroll down, you should see the Bitcoin folder.

I did that...it doesnt seem to work

I put in %APPDATA%  and there is no Bitcoin folder

See screencast

http://www.screencast.com/users/kirwin2009/folders/Default/media/e29aec26-8526-4897-a819-89b443a650ca

Have you started Bitcoin on the Windows machine so it could create the directory etc? 

Once you have it running on the Windows machine, you would use your older wallet.dat instead of the newly created one.

Also, what is in the _Bitcoin-MAIN folder?

I opened the Bitcoin Core software and went to Windows Exploer and put in %APPDATA% and there is still no Bitcoin folder

I have folders set to "Show hidden folders"

Any other suggestions

For the Mac version, are you still running 10.6.8 or did you try with a current version of the OS?

Again, what is in the _Bitcoin-MAIN folder?

Im running OS X Yosemite 10.10.4   That Bitcoin folder was set up so I could load the program somewhere other than the default.  I eneded up deleting my first install and reinstalled it and allowed it to put its files where ever it wanted.  Its an empty folder

ALSO  I am trying to import my backup from a flash drive (wallet.dat) made on a mac into blockchain.info.  This is on a wiondows cumputer.   I created an account and when I try to import wallet...either dragging it into the space or other it doesnt seem to recognize it   cant get it to work

That's broken since long ago. To import the private key, you need to download Bitcoin Core and go to HELP>DEBUG WINDOW>CONSOLE and use this command to unlock your wallet then export private key by using this command . Then copy the private key and import it into any wallet.

Thanks for your help....Im not a programer so this is like a root canal.  I tried to follow your instructions
1) I pulled up the debug window
2) In the field I typed the word "Walletpassphrase"   then a space ....then I typed my password then a space then the number 600.....
3) I got an error message that reads Error:  running with an unencrypeted wallet, but the passphrase was called"

All I have is a wallet.dat file on a flash drive and a password.  What do I need to type into that field to go to the next step?

Thank you so much

The error showed was the wallet being unencrypted, meaning that the wallet.dat you're using it wrong. If your wallet.dat is encrypted, have you used it on the correct wallet.dat? Try copying the wallet.dat backup into %appdata%/Bitcoin and try again. You should be able to export your private key after that.

Thanks for the reply but that doesnt work either
I did that...it doesnt seem to work

I put in %APPDATA%  and there is no Bitcoin folder

See screencast

http://www.screencast.com/users/kirwin2009/folders/Default/media/e29aec26-8526-4897-a819-89b443a650ca

This back up was made using Bitcoin Core on a Mac.  I have been unable to open Bitcoin core on my mac  Error is "Bitcoin has closed unexpectadly"  I have done everything  (See past posts)  I have now installed BitCore on Windows computer.  So I am trying to open a wallet.dat file made on a mac on a windows platform.  I cannot see the bitcoin folder...I have gone into my settings and made sure folders are not hidden.   I cannot import the wallet into blockchain.info and I cant get bitcoin core to recognize it either....SEE LAST POST

Thanks

Have you by any chance met this screen[1] and changed the location?

Alternatively, try opening command prompt, use . Replace Bitcoin-qt location here with the place you installed it to eg. C:\Program Files \Bitcoin\bitcoin-qt.exe and create a new folder anywhere on the computer and replace NEWLOCATIONHERE with the directory to the new folder. Open Bitcoin Core and shut it down. Next go to the newlocation and replace the wallet.dat inside with your backup and try my commands again.


[1]https://bitcoin.org/img/full-node/en-win7-welcome-to-bitcoin-core.png

Are you checking the C drive in addition to the F drive?  The Windows screenshot only shows F.

You can make some new wallet (with some program you like, for example on blockchain.info, or in MultiBit or elsewhere) and get new bitcoin address. Then find some friend you trust who has Windows with working Bitcoin Core, bring your wallet.dat to him (or all your multiple wallet.dat files if you have more backups). And try to access your old funds there (backup his wallet.dat, replace it with your backup, start his Bicoin Core, let it synchronice), then sending all BTC to your new address.
5 BTC is quite a lot of money it would be sad to lose it.

Yeah, i'd recommend electrum or blockchain.info. Bitcoin Core has syncing problems, which cause massive panic to the user, although it is all-round pretty safe.

I use coinbase because I never have more than two hundred in my coinbase account at any one time. Even then, I spread the coins across multiple accounts, so I'm safe :D

Bitcoins wallets although say about maintaining protection. But, still experienced hackers can do something anywhere. If you're seeing pending or unconfirmed transaction. It means someone has sent bitcoins from your wallet to his own wallet and transaction is in confirmation process. If it confirms your wallet balance is gone. If it doesn't confirm by God's grace, it will stay there. You can't do anything here. Lost bitcoins are like stolen money.
The precautions always remain the same. But somethings happen no matter what you do. To protect your remaining coins, be cautious and keep your private keys . If you have multiple devices, you can keep your private key safe. So, even if you lose coins. You will lose very less.

I am still getting no where.  Your help is so appreciated.  Im assuming you can just read back through my thread so I dont need to restate my eternal saga.  WHere it stands now is

Run
http://www.screencast.com/users/kirwin2009/folders/Default/media/82a83dad-d7f6-46a8-b2dd-6e081299bfa8

Error
http://www.screencast.com/users/kirwin2009/folders/Default/media/8ff4b585-89c9-4054-b299-1de2f55f30cb

I cannot open a backup of 5 bitcoins on a different computer. Old computer is toast.   Backup shopuld be good.  It was created from Bitcoin Core and I have a password....thats it.  My last instructions was to  go to the run dialog and put in    %appdata%/Bitcoin

Unfortunatly....when I do this I get the error message as show above.  Any suggestions as to why this Bitcoin folder is not showing up on my Windows computer.  I have Bitcoin core updated and running at the time

Thanks again

Well, the first one says there is no such directory as C:\Users\New

What is the name of the user you are using? 

You can find it like this according to this depending on windows:

from:
http://library.queensu.ca/libguides/computers/windows-username-check.htm :

That would be because the folder doesn't exist. Open the file explorer and in the bar on top type %appadata% then hit enter. In the folder it takes you to, there should be a folder named Bitcoin. If it isn't there, create the folder. Make sure you use a capital B. If the folder is there, open it. Once in the folder, copy the wallet.dat file there and then start Bitcoin Core.

OK...I did as you suggested..

http://www.screencast.com/users/kirwin2009/folders/Default/media/a7e972e6-56cc-43cd-a4c8-8a8a4941ba74

I created the Bitcoin folder and moved the wallet.dat backup file to that folder.

However...when I look in the program I do not see them any where in Bitcoin Core . I tried closing the program and opening it several times.  I looked at several youtube videos on restoring a backup and I didnt see anything else to do

How do I access the coins

Here is a screen shot of Bitcoin Core opened up with the wallet.dat file in the Bitcoin diredtory.  How do I get them to show up

http://www.screencast.com/users/kirwin2009/folders/Default/media/39825d27-b5b1-4cc0-ba35-6c3a134b90fe

NOTE:  This backup was made on a Mac and I am now opening them on a windows computer....does that matter?

Thanks

Oh. I think I see the problem now. Earlier I assumed you hadn't run Bitcoin Core yet so the data directory wasn't created. However that does not appear to be the case. You need to put the wallet.dat file in the data directory, which by default should be in %Appdata%/Bitcoin unless you changed it. If you don't know where it is, just search in the file explorer for "Bitcoin" You should find a folder with a few other folders within it. It should have "blocks" and "chainstate" folder as well as a wallet.dat file and a debug.log file. If you find that folder, replace the wallet.dat in their with your own.

Praise The Lord!  You did it man...I have been trying to do this  for 6 months and you did it in two replies.  Man...thank you so much...you are awesome!!!!!!!!!!



AWESOME

Your welcome   :D I think your problem earlier was using a Mac  ;)

It is nice to see a story with good end :-)