Bitcoin Forum

Whenever I copy anything and paste this address gets pasted and make me loose money !

Please help me what to do and anyone else felt same ?

when i serch internet : http://www.reacttant.com/r/AlphaBay/comments/3vji9x/clue_of_the_lost_bitcoins

Dont quite get what you're saying here. Where's the scam accusation ?

Your computer is infected. Move your wallet to a safer place then format the partition and re-install the OS. After that its best if you make another wallet and move your funds their because this one is most probably compromised.


I think what he's trying to say is that the owner of this address is trying to scam as whenever he copy pastes any address, this one gets copied into the clipboard instead of the one he intends to.

But yeah, he doesn't have enough information for a scam accusation and this should be regarded as warning or asking for help?

Should be moved to meta.

OP best to do a full format of your pc.

Looking at the blockchain for this wallet makes it look suspicious... tons of small amounts pouring in over the past 3 months... looks like they may have a virus going around...

The address contains more than 4 btc currently and has received 35 in total till now. Couldn't find anything but it is listed here as Bitcoin ATM at Dallas, TX, USA.

https://localbitcoins.com/ad/300690/bitcoin-atm-dallas-tx-usa
https://archive.is/VLcj6

If that's really the case, this is a clever way to steal bitcoins but I don't know, how does the virus actually know when to paste the scam address or is it getting pasted every time you copy paste something?

Bitcoin addresses have a certain length. If the clipboard happens to contain a string of that length, it gets replaced.
The virus could also check what software/website anything is supposed to be pasted into, and if it's BTC related, the address gets replaced.

Tons of possibilities which Windoze systems offer in those regards.

.edit:
The attacker could also implement a check if whatever is in the clipboard is a valid BTC address. It's easy to code. Same technology which tells you if the address you're sending to is valid, in your wallet software.

hey , it is A viruse , it attached to clipboard and change your bit address , you must update your anti virus , i have your same problem and loss 2 BTC   >:(

Since some addresses are longer/shorter than others I'd suspect more so the latter. The script could verify the checksum to verify if it's a BTC address.

Why even bother with the clipboard trick. If they have a process running with permissions to alter the clipboard, why not just steal the wallet.dat ? This seems strange to me

If it's encrypted, the attacker would also need the passphrase, which is another hurdle to overcome. The clipboard thingy makes sense, from an attacker's point of view.

coinableS: agree. One small script which does the check and you have certainty if it's a BTC address.

how did you get the address and why were you copy pasting it by the way?

that is sure a good way to steal btc. must be a very pro theif