stolen bitcoins from Bitcoin Core

[jkirwin]

I have Bitcoin core loaded and 5 bitcoins in the Bitcoin Core wallet.  Passwords kept offline.  I was updating the blockchain and my computer got hacked.  My balance now says 0 and unconfirmed says 5.  Here are my questions

1) Are my coins actually gone or can I still recover them if they are "UNconfirmed"
2) I have several hundred lightcoins and I would like to know what precautions I need to take to  stop from having those stolen if I try to update the lightcoin block chain

Thanks

John K

[redsn0w]

I have Bitcoin core loaded and 5 bitcoins in the Bitcoin Core wallet.  Passwords kept offline.  I was updating the blockchain and my computer got hacked.  My balance now says 0 and unconfirmed says 5.  Here are my questions

1) Are my coins actually gone or can I still recover them if they are "UNconfirmed"
2) I have several hundred lightcoins and I would like to know what precautions I need to take to  stop from having those stolen if I try to update the lightcoin block chain

Thanks

John K

Keep calm, can you post one of your bitcoin address? So we can examine better the situation, thanks.


PS: you should remember that if one transaction has received at least 1 confirm it is impossible to 'chargeback' it, due the irreversibility of this technology.

[shorena]

I have Bitcoin core loaded and 5 bitcoins in the Bitcoin Core wallet.  Passwords kept offline.  I was updating the blockchain and my computer got hacked.  My balance now says 0 and unconfirmed says 5.  Here are my questions

-snip-

By updating the blockchain you mean...?

As long as the wallet.dat is encrypted and the password is reasonably strong you have nothing to worry about for now. Dont use the wallet on the infected machine ofc.

[jkirwin]

how do I locate an address? 

[pedrog]

how do I locate an address? 

At 'Receive Coins' you'll find your addresses.

Have you open/decrypt the wallet in that computer?

[jkirwin]

Thanks so much for your help

At "recive Coins"  it only showed one address  (Below)

17SZMZY1N7ZQBR55Xn9DuSPMtmxsVgJfY4

It did not list the five bitcoins separately.  The wallet previously said "Balance" 5  it now says Balance 0

Also...not sure what you mean by  "Have you open/decrypt the wallet on that computer"

[pedrog]

Thanks so much for your help

At "recive Coins"  it only showed one address  (Below)

17SZMZY1N7ZQBR55Xn9DuSPMtmxsVgJfY4

It did not list the five bitcoins separately.  The wallet previously said "Balance" 5  it now says Balance 0

Also...not sure what you mean by  "Have you open/decrypt the wallet on that computer"

If you did so, your password could have been capture by a keylogger.

Your address has 1 bitcoin, last transaction out was 8 bitcoins distributed in 2 addresses:

https://blockchain.info/address/17SZMZY1N7ZQBR55Xn9DuSPMtmxsVgJfY4

[redsn0w]

Thanks so much for your help

At "recive Coins"  it only showed one address  (Below)

17SZMZY1N7ZQBR55Xn9DuSPMtmxsVgJfY4

It did not list the five bitcoins separately.  The wallet previously said "Balance" 5  it now says Balance 0

Also...not sure what you mean by  "Have you open/decrypt the wallet on that computer"

If you did so, your password could have been capture by a keylogger.

Your address has 1 bitcoin, last transaction out was 8 bitcoins distributed in 2 addresses:

https://blockchain.info/address/17SZMZY1N7ZQBR55Xn9DuSPMtmxsVgJfY4

Last transaction included in the block 273390 with this timestamp: 2013-12-06 13:41:25  so it is not this the correct address.

[jkirwin]

All I know is the balance was 5 and now its 0....if I open up the lightcoin wallet the balance is 147.....so Im reading the balance correctly.  Something has changed within the wallet.  The unconfimed number is 5.......SO.......are they gone.......?  and how do I get the other lightcoins off of my computer without having the same thing happen to me

[escrow.ms]

All I know is the balance was 5 and now its 0....if I open up the lightcoin wallet the balance is 147.....so Im reading the balance correctly.  Something has changed within the wallet.  The unconfimed number is 5.......SO.......are they gone.......?  and how do I get the other lightcoins off of my computer without having the same thing happen to me

Are you able to take a screenshot of your wallet and post here?  Use http://imgur.com to upload screenshot

[pedrog]

All I know is the balance was 5 and now its 0....if I open up the lightcoin wallet the balance is 147.....so Im reading the balance correctly.  Something has changed within the wallet.  The unconfimed number is 5.......SO.......are they gone.......?  and how do I get the other lightcoins off of my computer without having the same thing happen to me

Is Bitcoin Core already synced with the network?

If 1PyQYiNNCD5B19UDxuTQf4x6qodk83rHy is a change address you have 5 bitcoins, but I believe if that was so you should see the address in 'Receive Coins' tab.

The transaction is confirmed since 2013...

[escrow.ms]

All I know is the balance was 5 and now its 0....if I open up the lightcoin wallet the balance is 147.....so Im reading the balance correctly.  Something has changed within the wallet.  The unconfimed number is 5.......SO.......are they gone.......?  and how do I get the other lightcoins off of my computer without having the same thing happen to me

Is Bitcoin Core already synced with the network?

If 1PyQYiNNCD5B19UDxuTQf4x6qodk83rHy is a change address you have 5 bitcoins, but I believe if that was so you should see the address in 'Receive Coins' tab.

The transaction is confirmed since 2013...

I guess his client isn't synced completely and showing 5 BTC unconfirmed

[jkirwin]

Screenshot of Bitcoin Desktop (It used to say Balance 5)

http://www.screencast.com/users/kirwin2009/folders/Default/media/50c2fdac-bcf1-460e-8aec-6ce4734ef8e1


Bitcoin Receive section

http://www.screencast.com/users/kirwin2009/folders/Default/media/78e901e5-41f9-4d3d-a934-f4d20771c621


Firewall Warning (NOTE  This starts popping up about 1 minute after I open the utility and it starts to download the blockchain)

http://www.screencast.com/users/kirwin2009/folders/Default/media/cb7060fa-9e4b-4cdf-aee4-b4512b7c770c  

The coins have been sitting in this wallet unued since 2013....no activity.....I just recently decided to move them to a different computer so I need to download the latest blockchain so I could prosess a transfer.    During the downloiad I got hacked.....the download never completed and I did not try to make a transfer

[PolarPoint]

I think you sent 4 btc to your change address 1PyQYiNNCD5B19UDxuTQf4x6qodk83rHy when you sent 4 btc to btc-e back in 2013. Those 4 btc change hasn't moved since. Your coins are still in your wallet, they are not showing because your blockchain is not up to date. Wait for the blockchain to download and you should see 5 btc confirmed.

[jkirwin]

As I said   It was updated in 2013  and it has shown the balance to be 5 since that  time.  I am absolutley sure of that.  within the last week it went from 5 to 0. 

Im Not sure what to do next?

Are they actually gone if it says 5 unconfirmed or are they gone

WHat steps do I need to take to get the lightcoins off this computer without losing those

ie

1) Run Malware as you suggested
2) Make sure firewall is upto date
3) ??

 

[achow101]

Looking at your screenshots, it seems that your client has not synced yet. It is updating the balance as it syncs and it has only synced up to December 2013. Wait until the red "out of sync" message next to where it says "wallet" and "recent transactions" to go away. Once that is gone, Bitcoin Core should be fully up to date and you will see how much you actually have.

You should allow the connection to your computer if someone is attempting to connect to Bitcoin-qt or Bitcoin core. This will allow you to be connected to the network and sync the blockchain.

[escrow.ms]

As I said   It was updated in 2013  and it has shown the balance to be 5 since that  time.  I am absolutley sure of that.  within the last week it went from 5 to 0. 

Im Not sure what to do next?

Are they actually gone if it says 5 unconfirmed or are they gone

WHat steps do I need to take to get the lightcoins off this computer without losing those

ie

1) Run Malware as you suggested
2) Make sure firewall is upto date
3) ??

 

1. As knightdk said, Just sync your wallet and you'll be fine, your bitcoins are not lost.
2. You don't need to do anything to keep your litecoin's safe as you are running OSX and it doesn't gets infected with malware easily.

[pedrog]

Screenshot of Bitcoin Desktop (It used to say Balance 5)

http://www.screencast.com/users/kirwin2009/folders/Default/media/50c2fdac-bcf1-460e-8aec-6ce4734ef8e1


Bitcoin Receive section

http://www.screencast.com/users/kirwin2009/folders/Default/media/78e901e5-41f9-4d3d-a934-f4d20771c621


Firewall Warning (NOTE  This starts popping up about 1 minute after I open the utility and it starts to download the blockchain)

http://www.screencast.com/users/kirwin2009/folders/Default/media/cb7060fa-9e4b-4cdf-aee4-b4512b7c770c  

The coins have been sitting in this wallet unued since 2013....no activity.....I just recently decided to move them to a different computer so I need to download the latest blockchain so I could prosess a transfer.    During the downloiad I got hacked.....the download never completed and I did not try to make a transfer

How did you move the coins?

Did you use the backup when you first installed the client or you used a backup made after all those transactions? Do you still have access to the previous wallet?

You may have lost the change address, if so, 4 bitcoins are lost.

To 'move' your litecoins you just need to backup your wallet.dat, it's exactly the same as bitcoin.

https://en.bitcoin.it/wiki/Data_directory

[Moebius327]

As I said   It was updated in 2013  and it has shown the balance to be 5 since that  time.  I am absolutley sure of that.  within the last week it went from 5 to 0. 

Im Not sure what to do next?

Are they actually gone if it says 5 unconfirmed or are they gone

WHat steps do I need to take to get the lightcoins off this computer without losing those

ie

1) Run Malware as you suggested
2) Make sure firewall is upto date
3) ??

 

First of all calm down. Your coins are not lost and you don't have to do anything except wait for the wallet to syncronize and download the whole blockchain. If you're in a hurry you can use dumpprivkey console command to export the private keys of the two mentioned addresses.  

[ragi]

Why not give Electrum a try? You don't have to download the whole blockchain and wait to sync. Or you can split the amount and use them both.