Bitcoin Forum

This can serve as the discussion thread, since nobody has made a good thread for such yet. People are claiming that their bitcoins were sent from their bitcoin wallet to another place. People are pointing fingers at YaCoin, but before we can do that we need these questions answered:

1. What OS are you on?
2. Where did those who lost coins download their client?
3. Did anyone loose coins from a client they built directly from the source, as opposed to released by the dev or someone else?
3a. If so, which source?
4. Where were your coins sent to?
5. WE NEED PICTURES, SCREENSHOTS, ETC


Also:

Has anyone considered it could have been the cpuminer that was released for it later on?
Maybe not the developer of it, but someone who built windows binaries for everyone might have stuck a wallet stealer in it before building.

https://bitcointalk.org/index.php?topic=202089.0 --- A list of people who reported stolen bitcoins.

Yeah I'm also doubting it. As of yet only 4 people have been affected by it and spam every single thread with it.

https://mega.co.nz/#!5wgDnKyZ!QLfWTXNRMRTwmb60rfpuFgzH48BCl4fpwb8paeAaqR
(broken link on purpose, add an s to the end if you want it)

From there?

We need screenshots of Wireshark, Process Monitor or Firewall warnings. I can't replicate the issue at all. I've been trying to make it steal my (empty) bitcoin wallet.dat in a VMware, but I'm not succeeding.

Wow.. I'm fined $430 for a speeding ticket and I come home to see all my bitcoins stolen.

Sent to 1RPrtamTACe1TcqkX2FmWVtRzmQJ6CfRx too. Yup, I downloaded it from mega.

Agreed. I am not able to reproduce this. Posters have not posted any screenshots.

it will not steal empy wallet . u need to put some BTC on it and wait

ouch

To my understanding, the way people are describing it is that the coins were sent in waves, not right when it detects your wallet (If it even does)

Never a dull day in crypto currency land  :o

My "guess" is that this is where the trojan.. if it even exits.. came from https://bitcointalk.org/index.php?topic=200147.0

Or maybe from https://bitcointalk.org/index.php?topic=201050.0 ...can someone reproduce in a sandboxed environment??

We still didn't see a single screenshot, nor a single firewall warning...   that's ridicolous...

Spam frenzy?

Another guy in spam frenzy...  

Please post proofs. I can't see any. (and your pc cant get infected reading a thread on bitcointalk man....)

Or are you accusing ali1234? I cant really understand you.

1. Windows
2. From the thread linked
3. No, I downloaded a binary
4. this one: https://blockchain.info/address/1RPrtamTACe1TcqkX2FmWVtRzmQJ6CfRx

Why are you talking if you don't understand?  ???

Proof of what? read again or buy a dictionary.

Lol? Do you have any clue what you're talking about? How can it check if the wallet is full or empty without even reading the freaking file? You're so full of shit...

Did ali1234 release windows binaries for his miner? If he didn't, then I doubt it was him, we would have seen it in the source. Seems like everyone is saying this happened on windows.

Come one man, post a proof that the trojan is where you "guess" it is. Are you accusing ali1234? Are you accusing someone who posted in that thread? Please clarify.

Can anyone think why my account was compromised to spread FUD about Yacoin?

Any thoughts??

Better to use accounts with more posts than Jr Member accounts with 10 or less.

I dont'understand why CesarV is accusing Ali1234 (not even sure Cesar is really accusing Ali1234 or he is just spamming for fun)

You were probably low hanging fruit...  Easy password or they had access to a pw you used on another site. 

Have you changed your passwd yet?

Here are md5sums of my yacoin windows downloads.  I downloaded them from the links in the first post of the original thread posted by pocopoco.  I was running them in a VM so I don't know if they are safe.  No coins were stolen (of course).

eb7e4762e94b57baf42d4bffbcda0f3d  yacoin-qt-2013-05-08.zip
12706e84822c6d8399fc210b2e379996  yacoin-qt-2013-05-09.zip

Dude stop this you are not helping.

Someone cracked your password and is using the hype to buy cheap YAC.

I can't remember which password I used but it is changed now. It wouldn't be a password linked to anything important... I hope!

This is definitely true... Have a look through my recent posts! They ain't me!!

here is where someone asked for the minerd client to be made

https://bitcointalk.org/index.php?topic=199517.0;all

The "virusscanner friendly" minerd was infected with a wallet stealer.

There has been no proof whatsoever that Yacoin was infected. I cannot replicate these "findings" at all in a VMware with process monitor.

I am accusing limitless, he is a known scammer on this forum - he makes threads to make himself look legit while scamming people in trades, don't take my word for it, just search his name on this forum. Also look at the thread I linked, he was the one that made it and there are several accusations in that same thread that the files in his links have Trojans.

And no, I am not siding with the guys that say YAC has a trojan, I have not been affected myself so it all looks like fear mongering to me for now.

Have to say that this is entertaining to watch. Is this the first cryptocoin fud?

You aren't helping for making a new thread by the way, your cluttering this section even more.

The first was Bitcoin itself ;)

Maybe one of the thousandth, search the keyword FUD, I bet you'll get a million or so results.

If you mean for altcoins, errr no there have been a few.

mr_random cleaned up his thread title at last.

Still confused - which was the infected miner? Wondering whether to stop mining Yacoin with the minerd I downloaded. This PC only has a few FTCs; and the thief will have to wait for a day to get his hands on them :P

Thank you for clarify. So you're accusing limitless (I know he is a trade scammer).

Stupid question, in my bad english:
 How can Limitless infect any computer trough that thread? Did he posted any link except ali1234 miner? I feel dumb but i can't understand you, sorry man, nothing personal.

Supposedly, the windows binaries were infected with the virus, specifically downloaded from mega.co.nz

All this YAC fear mongering is actually a testament to its success.

nocompare's post history includes an advertisement for the miningunited scam, mmh.

Maybe this one was the infected minerd.

https://bitcointalk.org/index.php?topic=200147.msg2095639#msg2095639

Is anyone going to post up a SINGLE screenshot of there bitcoin wallet with the transactions going out? - come on 'we want to believe'

I feel even more stupid now. Also you are saying Limitless posted there "some YAC related software" (same thing Cesar is saying). I guess you both are correct and I'm wrong.

Please imagine I'm a six year old child, I can't read pretty well: show me where Limitless posted this software. Thank you!

+1

Now assuming that a couple of people were in fact compromised...

Also, i see windows users so eager for binaries. https://bitcointalk.org/index.php?topic=199517.0;all and see so many people literally begging for windows binaries. I had couple of people PM spam me for them as well when i clearly state all i was concerned about was getting a source and knowing its compatible with Linux.

I skimmed thru the yacoin source, looks clean.

I can offer bounty of 2k YAC for some well known expert security analyst to make a report on the official yacoin binaries. I know this is a small amount for an expert, so I encourage others to join in the bounty.

If people download binaries from untrusted places, they are at fault.  If this were to happen to me, id feel bad, rant a little, but in the end accept my own fault for using untrusted binaries.

This is what happens when devs disappear instead of being around to defend and promote their projects..

I didn't see anyting in the commits at release either, nor now again. For what it's worth, grepping for pieces of the alleged stealing domain or IP, either in clear ascii or in hexadecimal codes, yielded nothing.

The only suspicious coin i participated in was chinacoin and i built and run that in a sandboxed environment. Simply because they didnt fork from a trusted coin. They uploaded it as a fresh source on github... nobodys got time to check all the things....

whereas skimming the commits is much easier.

I've dealt with hdclover on the 9.5.13 selling him YACs. He was desperate to get more.

Anyhow I have checked the BTC address he sent my payment from and there is nothing missing. So either hdclover had a different wallet.dat corrupted or did not lose anything.

Anything else, make your own conclusions. And feel free to repost that to the other posts he did.

Good find  ;)

I agree. I didn't know about scrypt-jane so I even went to their git and compared the code to see if there was anything strange added to it.

I'm still waiting. If you or Cesar have a spare minute please link me a "quote" or a "screenshot". I really would appreciate that, and forgive me for being so dumb, I can't find it. Thank you!

I direct your attention
===> https://bitcointalk.org/index.php?topic=202255.0  (https://bitcointalk.org/index.php?topic=202255.0)

Sht the fuck up, you don't have idea what you are talking about.

This is virustotal scan of original pooler's cpuminer, it's 33/46

https://www.virustotal.com/en/file/8670d1587ed339719b495dca78e54e812efb6ce8bf263cdac3f3096f21a6f70e/analysis/

Have you ever fucking heard for false positives?

Why are you stupid? Can't you see that it's the official client made by ali? Used everywhere ?

www.yacoin.org (cpuminer linux)
yac.dontmine.me (getting started section)

You can find that client everywhere and it's just a modified cpuminer for linux. I hardly doubt people keep their bitcoin wallets in the servers they use to farm tyhe bitcoins with. But obviously you are really stupid.

Are you trying to defame yacoin?

What does that have to do with anything?

We should stop posting in this thread... starting from.... NOW!