Chris

Thanks for the info - I've learned a lot from you already. I'm using another PC for changing passwords and was planning to reinstall the infected PC except I've got some software that I can't afford to lose on it at the moment. If the PC can be cleaned instead of wiped it would be a better option for me.

I use Sunbelt Vipre which is great for blocking viruses but this little gremlin wasn't detected even by a manual scan. Malwarebytes picked up the log directory and deleted it but I can't tell whether the PC is clean since I don't know how the thiefware works. If you could provide the info on checking if the PC is clean I would be very thankful.

I've followed your three steps to report the sites and I'll be going onto Twitter and Facebook searching for other victims of this scam.

Looking at the volume on BTC-e, there are potentially thousands of bitcoin being syphoned off.  I would put the alert out on BTC-e chat but ironically I don't have enough funds to be allowed to chat

Thanks and best wishes

Nice people skills there Chris. I know many very intelligent people that have no interest in IT and so wouldn't be able to tell the difference between trojans and utils until it's too late.  Lets not get too egotistical on our geek abilities and lets try to help each other out with a bit of respect.  And if you're wondering, yes I got caught out and lost my bitcoins - so by your criteria, I'm stupid - no offence taken.

Thanks, HighSociety. I was directed to that website due to references mentioning http://www.bitcoindriveprice.com/ over bitcoinwisdom.com which i felt was lacking in info.

The website doesn't look too convincing but the amount of comments elsewhere promoting it can be seductive.

I did a google search to check it out and came up with these results:
thuckgood      4 Days Ago   salt, www.bitcoindriveprice.com is better then bitcoinwisdom in my choice test it...
btce1s   18 Hours Ago   smedia2010, lol true, anyone now should wait until price drop look here it will be happen soon: www.bitcoindriveprice.com
http://dcaz.net/user/thuckgood - pushing this website all over this page.
http://dcaz.net/user/btce1s - pushing this website all over this page.
olliebtce   Can the moderator ban btce1s: !!! If you look at their history they keep plugging their scam website www.bitcoindriveprice.com.
00:45:32   btce1s   DBOOTYNABBER, BTC going to drop to 550$ today look at the analystics www.bitcoindriveprice.com
00:49:33   btce1s   jhovanny8, dont look on fiat they giving false result look here: www.bitcoindriveprice.com
http://dcaz.net/user/hardergamer - 3 entries on 22/12/2013
17:09:57   evilsim   my antivirus telling me this page is a trap - www.bitcoindriveprice.com

http://www.skyminerlabs.com/drive/ is another website to beware of - a replica of www.bitcoindriveprice.com that contains the same download link address.

http://wscheck.com/trust-report/bitcoindriveprice.com  -the website is less than a week old.

I think driveprice is a keylogger for the fraudulent benefit of thuckgood and/or btce1s, which I think is one of the biggest threats to bitcoin take-up for the regular guy.  Bitcoin maybe secure but the exchanges aren't, which means bitcoin funds are far more vulnerable than in banks.

The bitcoin world is still very much the wild wild west and open to thieves and pirates. You only have to look at BTC-e's troll box to see the type of people rife at the moment. Trying to screw each other over with pump and dumps. There are some helpful comments but mostly full of ego battles and name calling.


OK, so assuming that BTCDriveprice is a logger. How many people have already clicked on the download and lost money?

I will help all I can to help get it back and bring the scumbag to justice. I want the financial revolution to kick out the bankers, I don't want the people screwing each other over.

I'll share more info here later as I learn more - but if any techie whizzes out there can help then that would be cool too.

Same thing happened to GDC and SPT yesterday. They'll be back

My doge is a digging!
DUAJ43ZheYqwgJNqfdchsXktT3dTZpLSQN

Much thanks!

Acc ID AA83 N84G 0MBJ 3SDQ

May be a bug:

I had an order filled on the purchase of some bitcoins and part of the order was left open unfulfilled and labelled 'partial'.

The Bitcoins that were bought were sold shortly after and a new order was placed to buy at a lower price.
Any attempt to buy brought a message of 'insufficient funds' even though the total amount needed was well under my total $ balance.

I had to cancel the outstanding partial order and then I was able to successfully place another order.

If you are still giving bounty my address is 1Ea6cXD13LcK78WvPwHzJ5RocwSoBKps8L

Cheers

P

Well, my problem was sorted out by BTCPak support fairly promptly.

I went to the US Tab and clicked on the BTCPak Withdraw button
Click on the 'Order Status' button
Click on the Order ID, which opens another window
Go to the bottom left hand corner to find the 'Contact BTCPack' Link and start an email dialog

I got a reply within 10 minutes and BTCPak sent the original $ amount back to my UK Paypal address.

Lesson learned but it's an easy trap for a newbie.

I signed up to blockchain today with £100 and while trying to find out how to withdraw bitcoins, £70 went to BTCPak or Green Dot Moneypak. I'm in the UK and I didn't get a reference number or anything else and I only have a UK Paypal account, not a US account.  The browser window closed when I was navigating to find out what was happening.  I am not from the U.S but I've emailed Moneypak who haven't replied and want 2 business days

I'm basically in the same position?

    Can't check out to paypal, cause I'm not from US and I don't have a valid SSN/address


I saw "bitcoin->btc pak->paypal" and didn't notice the small U.S flag in the tab. One click is all it takes for the bitcoins to migrate over to Moneypak - no confirmations...

Admittedly, it is a mistake but the flag tabs default to US even though I'm in the UK and is easily missed since the tab borders are almost invisible and I too feel really down and scammed. What should we do?