Bitcoin Forum
November 01, 2024, 01:14:17 PM *
News: Bitcoin Pumpkin Carving Contest
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Dropbox malware?  (Read 568 times)
Boat4Sale (OP)
Newbie
*
Offline Offline

Activity: 50
Merit: 0


View Profile
May 19, 2016, 11:28:07 PM
 #1

I just got some files shared by some random person called "bitcoin backup" and inside it was electrum-2.6.4.exe and wallet.js

Is this malware? or some other type of hack/phishing attempt?
--Encrypted--
Copper Member
Legendary
*
Offline Offline

Activity: 924
Merit: 1007

hee-ho.


View Profile
May 19, 2016, 11:33:40 PM
 #2

https://bitcointalk.org/index.php?topic=1478385.0;topicseen

when someone shared some files out of nowhere, don't open them.
maybe post the link here. but remove the htt.ps://www. and write something [beware! might be malware.] just in case.
Quartx
Hero Member
*****
Offline Offline

Activity: 1036
Merit: 504


Becoming legend, but I took merit to the knee :(


View Profile WWW
May 19, 2016, 11:37:46 PM
 #3

Why would you want to open some random file shared with you anyways? Common sense dictates you either unshare/delete or simply download the said files from the actual site, or simply ignore, if you really want to open it, use a clean isolated machine, but scan it beforehand

Boat4Sale (OP)
Newbie
*
Offline Offline

Activity: 50
Merit: 0


View Profile
May 19, 2016, 11:40:51 PM
 #4

Why would you want to open some random file shared with you anyways? Common sense dictates you either unshare/delete or simply download the said files from the actual site, or simply ignore, if you really want to open it, use a clean isolated machine, but scan it beforehand

does wallet.js mean anything?
--Encrypted--
Copper Member
Legendary
*
Offline Offline

Activity: 924
Merit: 1007

hee-ho.


View Profile
May 19, 2016, 11:46:53 PM
 #5

Why would you want to open some random file shared with you anyways? Common sense dictates you either unshare/delete or simply download the said files from the actual site, or simply ignore, if you really want to open it, use a clean isolated machine, but scan it beforehand

does wallet.js mean anything?

it's a .js formatted file named "wallet".  Roll Eyes there can be anything inside.
Boat4Sale (OP)
Newbie
*
Offline Offline

Activity: 50
Merit: 0


View Profile
May 19, 2016, 11:51:38 PM
 #6

Why would you want to open some random file shared with you anyways? Common sense dictates you either unshare/delete or simply download the said files from the actual site, or simply ignore, if you really want to open it, use a clean isolated machine, but scan it beforehand

does wallet.js mean anything?

it's a .js formatted file named "wallet".  Roll Eyes there can be anything inside.

Yeah but would a electrum wallet be stored at wallet.js?
--Encrypted--
Copper Member
Legendary
*
Offline Offline

Activity: 924
Merit: 1007

hee-ho.


View Profile
May 20, 2016, 12:15:18 AM
 #7

Yeah but would a electrum wallet be stored at wallet.js?

getting greedy, aren't we?
afaik you can't store a file within .js file.
Boat4Sale (OP)
Newbie
*
Offline Offline

Activity: 50
Merit: 0


View Profile
May 20, 2016, 12:17:55 AM
 #8

Yeah but would a electrum wallet be stored at wallet.js?

getting greedy, aren't we?
afaik you can't store a file within .js file.

lol - I like money.

anywho its a virus..

https://www.virustotal.com/en/file/db398e8d1d42b777d88c0cc0dc062bb8d4e54ed451624a845c64db0448fe6897/analysis/
Shiroslullaby
Sr. Member
****
Offline Offline

Activity: 434
Merit: 250



View Profile
May 20, 2016, 12:19:50 AM
 #9

.js is a Javascript file.
I would definitely not open any files from a dropbox unless you know the owner and know the files in it are okay.

Boat4Sale (OP)
Newbie
*
Offline Offline

Activity: 50
Merit: 0


View Profile
May 20, 2016, 12:25:42 AM
 #10

.js is a Javascript file.
I would definitely not open any files from a dropbox unless you know the owner and know the files in it are okay.

The note that came with the notification said "Send 1 btc to Alan. Leave 2.7 btc in main wallet".


To be honest this is some good hacking technique, I was so tempted to open it to see if any bitcoins would fall out, lucky I posted here then scanned it!
techgeek
Hero Member
*****
Offline Offline

Activity: 826
Merit: 1000


View Profile
May 20, 2016, 07:50:39 AM
 #11

This is why you label your own back up file to something you recognize.

Anything else should be assume its a malware or trojan attempt, and if that happens youre screwed.

Cause basically you need a new computer.

Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!