Problems with bitcoin wallet - coins stolen???

[jackpot420]

Hi @ all!

2 weeks ago I transfered my coins to mt.gox (13bpnMEWM8JtsFy9H3K9EvNQyBz5KEno5A) in order to sell them. But instead of just transfering it started another transfer to an adress which I don't know. Now it looks like this:
http://250kb.de/u/130908/p/4qmvVu9jzKIC.png


Unknown transaction with confirmations: 3b81b2342c991eabfbdeb0c6d8c1ee08b153fa81870ba555a70db5cb9bb797c2
http://250kb.de/u/130908/p/l0RTanxwmT2m.png


My transaction without confirmations to mt.gox: 6cd50d16f6d5e95093e31a853aa597be994dda5da5d100466757450788e0ad65
http://250kb.de/u/130908/p/zpqwtiuODUFG.png


Did someone steal my bitcoins? The transaction to 1326nUTE25zue2swJ5USMguvbiYqZ3hFPY got confirmations, but I don't know this adress...
According to blockchain the transaction happened on 2013-06-21 but on my wallet it says 08/31!!?? 
Is there a possibility to determine where my coins are or even to get them back???

PLEASE HELP

[adamstgBit]

The coins you ment to send to 13bpnMEWM8JtsFy9H3K9EvNQyBz5KEno5A never got there, infact their isnt even a 0 confirmation tx on that address.

https://blockchain.info/address/13bpnMEWM8JtsFy9H3K9EvNQyBz5KEno5A



Your coins were sent to 1326nUTE25zue2swJ5USMguvbiYqZ3hFPY

https://blockchain.info/address/1326nUTE25zue2swJ5USMguvbiYqZ3hFPY


maybe you have some bitcoin stealing virus on your computer

I've heard of a virus that replaces the bitcoin address on your clipboard with its own address, you go and  copy paste an address, it replaces it with it own address and you end up sending the funds to the hacker.


try sending 0.01BTC somewhere else and see if its get sent to the hackers account again.

[adamstgBit]

where did you download the bitcoin client?

[jackpot420]

http://bitcoin.org/en/download

[rolling]

The 12.99 was definitely sent on 2013-06-21 to:

1326nUTE25zue2swJ5USMguvbiYqZ3hFPY
3b81b2342c991eabfbdeb0c6d8c1ee08b153fa81870ba555a70db5cb9bb797c2

and then to

1GcSZdgUE44ihWUjMAwiVPGdyQzS5JCBnB
c4ff9834f6bb81f8d29d6c5e264349c8660bb706dbe5e84889f5f98b43782a44

and then to

1FQg7hZt1ujNHDQpU9LWgAKQ8YXC6Dogqj
a1d5259297b7d53db042b5469092a8f87d24eade4cefd2b2f36434eaf8fed82a

which is used here:

https://bitcointalk.org/index.php?topic=237954.0

and looks like an Avalon group buy on the Chinese board.

The coins were not available to spend from 1H6qdVBkPoZ52HfxFrkyK9vBQXq1FZxF1a 2 weeks ago which is why the transaction to GOX didn't go through.

[jackpot420]

so what can I do now? Is there any possibility to get my coins back?

I already made a full search of my pc with kaspersky internet security and it found nothing...

Now I downloaded SuperAntiSpyware. Scanning Progress is still running. 65 threats detected till now 

[rolling]

so what can I do now? Is there any possibility to get my coins back?

I already made a full search of my pc with kaspersky internet security and it found nothing...

Now I downloaded SuperAntiSpyware. Scanning Progress is still running. 65 threats detected till now 

There is no way to get Bitcoins back.  That's the whole point of Bitcoin.  There are no refunds or chargebacks.  It's like cash that you had under your mattress.  When they robbed your house, they took the cash.

[Foxpup]

Your coins were stolen months ago, and there's nothing you can do to get them back. I notice your wallet is not encrypted. This fact plus all the malware you have is almost certainly how it happened. (Note that even encrypting your wallet won't help if you've got a keylogger, hence the importance of keeping your system free of malware.)

[jackpot420]

SH**!!!

I really thought kaspersky should be enough to secure my computer...

[adamstgBit]

he can get his coins back....

follow the money

someone said it was used in a group buy

follow up on that lead!

contact the guy that organized the group buy, find out who he sent the Avalon to for that TX.

he should be able to give you a name and address.

[blisscan]

I've heard of a virus that replaces the bitcoin address on your clipboard with its own address, you go and  copy paste an address, it replaces it with it own address and you end up sending the funds to the hacker.

If this is the case, it would be a good idea to add a robohash (https://robohash.org/) to the software to visually verify that the introduced address is the correct one.