my computer got hacked and my BTC and LTC is gone what can be done

[dogjunior]

My computer was hacked last night. I was stupid and clicked on a email I should not have and before I knew what happened my coins were transferred from my wallets. I had PW set on the wallets but still they were able to transfer out. Is there anything I can do or is it gone. Really sucks.

[1713238569]

1713238569

[1713238569]

1713238569

[1713238569]

1713238569

[1713238569]

1713238569

[Quickseller]

Did you log into your bitcointalk account from the same computer that you downloaded the alleged malicious attachment? Do you have an AV?

How strong was your wallet password? Did you use the same wallet password for anything else? Did you have your wallet password stored in plaintext anywhere on your computer?

Txids of the transactions?

[secrethedgehog]

Check the wallet, is there transactions?

If not you will still have your funds.

If its has gone then:

you may have a RAT  installed. https://en.wikipedia.org/wiki/Remote_administration_software

These softwares can also get your passwords from your browser history, if you used the same password as that on a site as your bitcoin wallet... thats how it would have happened. These softwares can also check your screen - files etc.

Do you have any malware/av installed?

check if you have any dodgy processes running your dont recognise. It could sometimes be undetected using a FUD Crypter.

[dogjunior]

Did you log into your bitcointalk account from the same computer that you downloaded the alleged malicious attachment? Do you have an AV?

How strong was your wallet password? Did you use the same wallet password for anything else? Did you have your wallet password stored in plaintext anywhere on your computer?

Txids of the transactions?

I have Norton on my computer and it blocked the malware or so I thought. But then the next day I checked my wallets and all my coin was transferred out. I don't have the pw of the wallet written down so don't know how they got past that. Really sad.


txids 5511a16add0a44869791175d9849567f846d7a8662e4775c1783567863203d34

[secrethedgehog]

cant find txid,

What file did you download? from which site? It may be a known scam.

if you post the link remember to change http:// to hxxp:// so it doesn't show up as a hyperlink and other people cannot click on it.

[techgeek]

Well that really sucks.. cause anything transferred or any bitcoin transaction for that matter is non-reversible.

Unless the person who stole your bitcoin returns it to you out of some moral sympathy. I`d try to contact that person if its possible, and say hey you got me! I`ll send you $40 starbucks gift card or something along those lines or something, boasting his/her ego.

[dogjunior]

Well that really sucks.. cause anything transferred or any bitcoin transaction for that matter is non-reversible.

Unless the person who stole your bitcoin returns it to you out of some moral sympathy. I`d try to contact that person if its possible, and say hey you got me! I`ll send you $40 starbucks gift card or something along those lines or something, boasting his/her ego.

Hard lesson learned. Get a cold wallet.

[Muhammed Zakir]

I have Norton on my computer and it blocked the malware or so I thought. But then the next day I checked my wallets and all my coin was transferred out. I don't have the pw of the wallet written down so don't know how they got past that. Really sad.


txids 5511a16add0a44869791175d9849567f846d7a8662e4775c1783567863203d34

Like secrethedgehog said, the txid is invalid. Can you please re-check and post exact txid or post your Bitcoin address from which the coins where stolen?

[Quickseller]

I have Norton on my computer and it blocked the malware or so I thought. But then the next day I checked my wallets and all my coin was transferred out. I don't have the pw of the wallet written down so don't know how they got past that. Really sad.


txids 5511a16add0a44869791175d9849567f846d7a8662e4775c1783567863203d34

Like secrethedgehog said, the txid is invalid. Can you please re-check and post exact txid or post your Bitcoin address from which the coins where stolen?

That is a LTC txid, not a bitcoin one. He claims to have had both BTC and LTC stolen and should provide a BTC txid as well.

[LiteCoinGuy]

My computer was hacked last night. I was stupid and clicked on a email I should not have and before I knew what happened my coins were transferred from my wallets. I had PW set on the wallets but still they were able to transfer out. Is there anything I can do or is it gone. Really sucks.

sorry for your loss. i would buy a hardware wallet to be more safe!

https://bitcointalk.org/index.php?topic=899253.0

[tyz]

Are you sure the transactions id is right? I can not find the given transaction.  

https://blockchain.info/de/search?search=5511a16add0a44869791175d9849567f846d7a8662e4775c1783567863203d34

txids 5511a16add0a44869791175d9849567f846d7a8662e4775c1783567863203d34

[secrethedgehog]

Are you sure the transactions id is right? I can not find the given transaction. 

https://blockchain.info/de/search?search=5511a16add0a44869791175d9849567f846d7a8662e4775c1783567863203d34

txids 5511a16add0a44869791175d9849567f846d7a8662e4775c1783567863203d34

As quickseller said below. its an LTC TXID

I have Norton on my computer and it blocked the malware or so I thought. But then the next day I checked my wallets and all my coin was transferred out. I don't have the pw of the wallet written down so don't know how they got past that. Really sad.


txids 5511a16add0a44869791175d9849567f846d7a8662e4775c1783567863203d34

Like secrethedgehog said, the txid is invalid. Can you please re-check and post exact txid or post your Bitcoin address from which the coins where stolen?

That is a LTC txid, not a bitcoin one. He claims to have had both BTC and LTC stolen and should provide a BTC txid as well.

[bitllionaire]

If you are sure someone has transferred the bitcoins, you can't do anything to recover them
sorry,at least this can be a lesson for the future

[Amph]

they brute forced your pass maybe? was a strong password? because otherwise they cannot do anything with a wallet that is protected with a strong password

you clicked on a link in the mail or you opened a file inside it? did the malware spread through only by clicking on the mail? because i clicked on some malicious email once, i just wanted to read it, and nothing happened

[photon_coin]

if no key logger stole your password as Amph stated the password could have been brute forced but this is not that easy..........

also a valid tx id number will not recover your coin however you may be able to trace them and seek professionals to see if they show up,  for example,


if a valid tx id shows the coins sent to another address, then in the block crawler we see a day later those coins are 'spent' at a known place it may be possible to find out who is responsible,


a long shot and doubtful you will recover your coin,


take advice of others , be careful, practice good security always and depending on your level of comfort use advanced methods and a hardware wallet for protection....

they brute forced your pass maybe? was a strong password? because otherwise they cannot do anything with a wallet that is protected with a strong password

you clicked on a link in the mail or you opened a file inside it? did the malware spread through only by clicking on the mail? because i clicked on some malicious email once, i just wanted to read it, and nothing happened

[jonnybravo0311]

My computer was hacked last night. I was stupid and clicked on a email I should not have and before I knew what happened my coins were transferred from my wallets. I had PW set on the wallets but still they were able to transfer out. Is there anything I can do or is it gone. Really sucks.

Well, first... hard lesson and you knew you shouldn't have clicked on the suspicious email in the first place.  Oh well...

If your wallet was truly password encrypted, then the malicious software that invaded your system from clicking that email would have to access that password.  Did you enter that password at any time (key logger)?  Did you store that password somewhere on your infected hard drive (i.e. passwords.txt)?  Did you use the same password for the wallet as you use on other sites, and store that password in your browser?

[BrianM]

My computer was hacked last night. I was stupid and clicked on a email I should not have and before I knew what happened my coins were transferred from my wallets. I had PW set on the wallets but still they were able to transfer out. Is there anything I can do or is it gone. Really sucks.

Sorry your coins are gone. Nothing can be done.
Game over. Instad of being sad use your energy for somethings positive.
Make some money, buy new bitcoins. Don't spend any more time on how you got robbed.

One thing though... You might want to educate your self a bit so you dont get robbed again, its really not too hard to avoid, just study the options a little, already a bunch of good advice in this thread.

[favdesu]

your coins are gone, but make sure to clean your pc.

programs you must have:

Avira anti-vir
malwarebytes


download them asap.

[ranochigo]

if no key logger stole your password as Amph stated the password could have been brute forced but this is not that easy..........

also a valid tx id number will not recover your coin however you may be able to trace them and seek professionals to see if they show up,  for example,


if a valid tx id shows the coins sent to another address, then in the block crawler we see a day later those coins are 'spent' at a known place it may be possible to find out who is responsible,


a long shot and doubtful you will recover your coin,


take advice of others , be careful, practice good security always and depending on your level of comfort use advanced methods and a hardware wallet for protection....

they brute forced your pass maybe? was a strong password? because otherwise they cannot do anything with a wallet that is protected with a strong password

you clicked on a link in the mail or you opened a file inside it? did the malware spread through only by clicking on the mail? because i clicked on some malicious email once, i just wanted to read it, and nothing happened

I find it weird how the anti virus didn't scan it once it is on the computer and blocked it.

I doubt professionals would be able to trace it to someone since most hackers uses mixers. When it is mixed, the coins that is involved will be associated with someone else.

your coins are gone, but make sure to clean your pc.

programs you must have:

Avira anti-vir
malwarebytes


download them asap.

Antiviruses aren't the answer for everything. Many viruses out there don't have their signatures on the malware's database and some viruses have stubs to prevent antiviruses from detecting them. The best way to prevent infections is to not click on suspicious link and not to download anything suspicious.

[gogxmagog]

true as stated above. anti-virus/ anti-malware dont catch everything... but they still have value...

the number one thing to remember is browsing safety/security. you already know you were wrong to click the link in an email... that should never happen. I dont even click links in emails from trusted sources/senders. If you absolutely MUST click a link, check it with virustotal.com first... it is pretty reliable for spotting malwares... but even then you must be super careful.

I lost some btc last year, because I was lazy and foolish. but I purchased a hardware wallet (a ledger wallet) and I feel much safer now.

getting robbed really sucks, and happens a LOT with btc, sadly. The experience can drive away new adopters more than anything else you might encounter in the btc world. developments are being made constantly to address the problem, but it is still a risk, even for the seasoned user. sorry dude, hope it doesn't turn you off for good.