Unwanted transaction sent in Electrum

[Erkallys]

Today; I opened my Electrum wallet to look how much I earned since the last time, I saw that all my Bitcoin has ben sent to this address : 1AhFvprgCs8QbmBJRDLRvwRtMieC9mMVuR, with this descrption ">1AhFvprgCs8QbmBJRDLRvwRtMieC9mMVuR". Help me please   !

[Coef]

Today; I opened my Electrum wallet to look how much I earned since the last time, I saw that all my Bitcoin has ben sent to this address : 1AhFvprgCs8QbmBJRDLRvwRtMieC9mMVuR, with this descrption ">1AhFvprgCs8QbmBJRDLRvwRtMieC9mMVuR". Help me please  !

As I see on the blockchain, the transaction has already got a confrimation now. Since bitcoin transaction is not reversible, there is no way you can get it back. I am sorry for your loss.

Have you recently downloaded any programs or strange files to your machine?

[Erkallys]

Today; I opened my Electrum wallet to look how much I earned since the last time, I saw that all my Bitcoin has ben sent to this address : 1AhFvprgCs8QbmBJRDLRvwRtMieC9mMVuR, with this descrption ">1AhFvprgCs8QbmBJRDLRvwRtMieC9mMVuR". Help me please  !

As I see on the blockchain, the transaction has already got a confrimation now. Since bitcoin transaction is not reversible, there is no way you can get it back. I am sorry for your loss.

Have you recently downloaded any programs or strange files to your machine?

I've downloaded GitHub and Cypher-qt yesterday.

[twister]

A hacker somehow got inside your PC and got hold of your keys/wallet and send your funds to himself, through either a virus/malware. Do a clean install of OS you're using and next time just avoid keeping your funds in a computer that stays on-line.

Read about cold storage https://en.bitcoin.it/wiki/Cold_storage to learn about how to keep your funds more secure.

[alani123]

Maybe download a virus deletion program too. I'd recommend to completely format your pc.

[emrebey]

your wallet was not a brainwallet, right?

[Erkallys]

your wallet was not a brainwallet, right?

What is a brainwallet ?

[cr1776]

your wallet was not a brainwallet, right?

What is a brainwallet ?

https://en.bitcoin.it/wiki/Brainwallet

[Erkallys]

your wallet was not a brainwallet, right?

What is a brainwallet ?

https://en.bitcoin.it/wiki/Brainwallet

So, no I don't think it was.

[Amph]

your wallet was not a brainwallet, right?

What is a brainwallet ?

https://en.bitcoin.it/wiki/Brainwallet

and how do you spend them safely, witouth importing it(which in this case will result in a loss, because is pc is infected)? the problem is always one, having a safe machine in the first place, no matter what kind of wallet you have, they are all unsafe if your device is infected(even encrypted yes, because if you need to spend bitcoin with an encrypted wallet you need to unencrypt it)

[Erkallys]

and how do you spend them safely, witouth importing it(which in this case will result in a loss, because is pc is infected)? the problem is always one, having a safe machine in the first place, no matter what kind of wallet you have, they are all unsafe if your device is infected
[/quote]

I'm rebooting my PC right now. But if I keep whole file of a coin in %appdata%, there's no risk that the virus survive ? Should I just keep the wallet.dat ?

[Amph]

and how do you spend them safely, witouth importing it(which in this case will result in a loss, because is pc is infected)? the problem is always one, having a safe machine in the first place, no matter what kind of wallet you have, they are all unsafe if your device is infected

I'm rebooting my PC right now. But if I keep whole file of a coin in %appdata%, there's no risk that the virus survive ? Should I just keep the wallet.dat ?
[/quote]

your pc is infected mate, any folder is unsafe, you need to scan your system

use malwarebyte + hitmanpro, then run an antivirus like avira or avast

if you can't remove i would suggest a format/secure erase of your hard disk

[cr1776]

and how do you spend them safely, witouth importing it(which in this case will result in a loss, because is pc is infected)? the problem is always one, having a safe machine in the first place, no matter what kind of wallet you have, they are all unsafe if your device is infected

I'm rebooting my PC right now. But if I keep whole file of a coin in %appdata%, there's no risk that the virus survive ? Should I just keep the wallet.dat ?

your pc is infected mate, any folder is unsafe, you need to scan your system

use malwarebyte + hitmanpro, then run an antivirus like avira or avast

if you can't remove i would suggest a format/secure erase of your hard disk
[/quote]

Even virus scanners can miss malware. The only way to be sure you removed it is to reinstall.

When you have more than a few coins, use cold storage.

[Erkallys]

and how do you spend them safely, witouth importing it(which in this case will result in a loss, because is pc is infected)? the problem is always one, having a safe machine in the first place, no matter what kind of wallet you have, they are all unsafe if your device is infected

I'm rebooting my PC right now. But if I keep whole file of a coin in %appdata%, there's no risk that the virus survive ? Should I just keep the wallet.dat ?

your pc is infected mate, any folder is unsafe, you need to scan your system

use malwarebyte + hitmanpro, then run an antivirus like avira or avast

if you can't remove i would suggest a format/secure erase of your hard disk

Even virus scanners can miss malware. The only way to be sure you removed it is to reinstall.

When you have more than a few coins, use cold storage.


[/quote]

If I put the folders on an external HDD, and then reboot my PC and put back some files in my cleaned PC, is it right ?

[Reynaldo]

No, you won't be safe saving infected files into a external hdd and then reinfecting your self. Format your who computer and let got the files too.

[Erkallys]

No, you won't be safe saving infected files into a external hdd and then reinfecting your self. Format your who computer and let got the files too.

How do I do to recover my wallet.dat in this case ?

[zen2]

No, you won't be safe saving infected files into a external hdd and then reinfecting your self. Format your who computer and let got the files too.

How do I do to recover my wallet.dat in this case ?

first export private keys. Print on paper or make foto with (non-internet) camera. clean all USB memories, external HDDs and all other flash memory or memory you used on this computer. Remember: If you burned CDs/DVDs in recent times: DONT USE ANYMORE!

then totally clean the computer -> format HDD SECURE! (= more than 5 time with rewrite on HD) & install SECURE OS (NO windows). If you use again windows because you have to, make sure its first secured before you install anything. DO NOT USE PRECOMPILED wallets of other coins, etc. Always try compile your things alone (from REVIEWED sourcecodes only) if its from not trusted developer. Most keylogger, wallet-stealer, etc. ARE NOT IN virus-database. In many cases its only small backdoor added to sourcecode of cryptocoins-apps, wallets & Co. TRUST NOBODY!

when the secure & clean computer is ready you simple install BTC wallet (ONLY from TRUSTED source) and import the keys.

sorry for your loss!

[Amph]

No, you won't be safe saving infected files into a external hdd and then reinfecting your self. Format your who computer and let got the files too.

How do I do to recover my wallet.dat in this case ?

your wallet data is worthless now, the scammer probably have sent your coins to another address

create another one after the format and this time, store your bitcoin in a second wallet.dat which you keep in a cold storage, and plug only in a safe machine

[Reynaldo]

Just make a new address on your fresh formated pc so you'll have a safe wallet. Electrum does not use wallet.dat but a seed that let's you recover your whole wallet information.

[Erkallys]

Just make a new address on your fresh formated pc so you'll have a safe wallet. Electrum does not use wallet.dat but a seed that let's you recover your whole wallet information.

I know that, I meant for the other altcoins. How do I do ?