Bitcoin Forum
May 28, 2024, 05:28:53 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Warning: One or more bitcointalk.org users have reported that they strongly believe that the creator of this topic is a scammer. (Login to see the detailed trust ratings.) While the bitcointalk.org administration does not verify such claims, you should proceed with extreme caution.
Pages: [1]
  Print  
Author Topic: SCAM - Fake windows wallet Probably a virus/trojan  (Read 179 times)
.fox. (OP)
Copper Member
Jr. Member
*
Offline Offline

Activity: 97
Merit: 2


View Profile
April 07, 2019, 08:51:09 AM
 #1

Fake link to download windows wallet

Scammers Profile Link: https://bitcointalk.org/index.php?action=profile;u=3464

Reference Link: https://bitcointalk.org/index.php?topic=5128790.0 https://bitcointalk.org/index.php?topic=5128554.msg50474248#msg50474248 https://bitcointalk.org/index.php?topic=5109799.msg49734104#msg49734104


User still deleted my post:
hugeblack
Legendary
*
Offline Offline

Activity: 2520
Merit: 3705


View Profile WWW
April 07, 2019, 12:37:03 PM
 #2

User still deleted my post:
It's the first time I've seen a warning about posting in Scam Accusations when a self-moderated post deleted.
Creating a self-moderated topic for Advertising is a negative indicator so I do not recommend anyone clicking on any links.

Why did you say that there are viruses? I see that the source is hosted by GitHub? Is because of the error message from the browser?

If it proved that they have viruses, report it to the admin "BAN."
.fox. (OP)
Copper Member
Jr. Member
*
Offline Offline

Activity: 97
Merit: 2


View Profile
April 07, 2019, 12:47:01 PM
Merited by hugeblack (2)
 #3

User still deleted my post:
It's the first time I've seen a warning about posting in Scam Accusations when a self-moderated post deleted.
Creating a self-moderated topic for Advertising is a negative indicator so I do not recommend anyone clicking on any links.

Why did you say that there are viruses? I see that the source is hosted by GitHub? Is because of the error message from the browser?

If it proved that they have viruses, report it to the admin "BAN."

file itself (wallet windows) dont run. I checked on clean computer and I see with code this:
Code:
FtpPutFile
FtpOpenFile

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
 <assemblyIdentity
    type="win32"
    version="5.0.0.0"
    name="Chapters"
    publicKeyToken="6595b64144ccf1df"/>
  <description>Shared Library</description>
 <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
  <security>
   <requestedPrivileges>
    <requestedExecutionLevel
     level="AsInvoker"
     uiAccess="false"/>
   </requestedPrivileges>
  </security>
 </trustInfo>
  <!-- Specifies the processor. The valid values are x86 and ia64. -->
</assembly>PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADD



so maybe grab wallet.dat or all folder appdata.

The capacity of the file itself is suspect.
You can also see how many user created coin topics.

Example: https://bitcointalk.org/index.php?topic=5129019.new#new
Why put wallet.dat to download? If he have coins, he can send coins to another user without put wallet.dat
hugeblack
Legendary
*
Offline Offline

Activity: 2520
Merit: 3705


View Profile WWW
April 07, 2019, 01:07:53 PM
 #4

I've archived these pages so he can’t modify them. ----> http://archive.is/AWwH7 ----> http://archive.fo/Lm8O3
+ report to the administration using the link above. I hope admin/mods take some action.
Until that time I wish some DT members to evaluate the situation and tagging that account.
The Cryptovator
Legendary
*
Offline Offline

Activity: 2254
Merit: 2181


Need PR/CMC & CG? TG @The_Cryptovator


View Profile WWW
April 07, 2019, 02:39:55 PM
 #5

Until that time I wish some DT members to evaluate the situation and tagging that account.
Handled,
Although I don't have enough knowledge about code but its seems more people's claiming about virus on their ANN thread. Archived link here ; http://archive.is/tVVBU . So I have tagged them and let them come on thread. Perhaps red tag would reconsider if they can provide appropriate reason. Instead of give valid answers deleting post is really suspicious to me.

██
██
██
██
██
██
██
██
██
██
██
██
██
... LIVECASINO.io    Play Live Games with up to 20% cashback!...██
██
██
██
██
██
██
██
██
██
██
██
██
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!