Stolen bitcoins?

[DavidAU]

Can someone help me figure out how this happened?

I purchased 8 bitcoins today and had them sent to my bitcoin-qt wallet, I got an email saying they have been sent so open it up and see they have arrived but are unconfirmed, so I come back an hour or so later to find that they have already been sent from my address to another address that I do not own (afaik, unless I am missing something here) and my balance is now at 0 bitcoins.

How the hell does this happen? I expect there is no way to recover those coins now? It's at 3/6 confirmations now for this new address... Am I screwed? I'm pretty careful about downloading anything that could be malware or clicking links etc so I have no idea how this happened? Is there anything I can do now?

[Raoul Duke]

If you are screwed or not nobody can say.
I would say you have malware on your computer, if it really happened as you described.

TX ID's, do you have them? You can double click the transactions on Bitcoin-qt and it will show you the details, including the TX ID

[digitalindustry]

Can someone help me figure out how this happened?

I purchased 8 bitcoins today and had them sent to my bitcoin-qt wallet, I got an email saying they have been sent so open it up and see they have arrived but are unconfirmed, so I come back an hour or so later to find that they have already been sent from my address to another address that I do not own (afaik, unless I am missing something here) and my balance is now at 0 bitcoins.

How the hell does this happen? I expect there is no way to recover those coins now? It's at 3/6 confirmations now for this new address... Am I screwed? I'm pretty careful about downloading anything that could be malware or clicking links etc so I have no idea how this happened? Is there anything I can do now?

Dam what OS are you running? Vista?

[cookiemonster84]

run malwarebytes, what does it say?

[Raoul Duke]

run malwarebytes, what does it say?

I would advise Hitman Pro http://www.surfright.nl/en

[etheral]

If this is true, someone should report this to moderators and warn other people

if you really didn't send those 8 bitcoins your self, there is nothing else to say - your money is lost

[tonyGee]

Malware bytes picked up guiminer-scrypt, which was downloaded from mirror 2 in this thread
https://bitcointalk.org/index.php?topic=150331.0

Hitman Pro has picked up cgminer-fpgaonly.exe and cgminer.exe from the same download.

Are these false positives?

I'm gutted $700 is a lot of money for me.

might be false positives,.......  if someone downloaded them from 2 + mirrors and compared exe's, and they are different, then mabye 1 is virus

[lostmyshit]

not that this helps you, but for the future , I would never run any of this stuff on a computer that has my wallet. I bought a 2nd pc to mine on, and run these things.... the wallet stays on my 'safe' computer

[enco]

Man, that sucks...
Also be aware that if someone managed to get ahold of your wallet in the past (!) or got ahold of an old backup of your wallet, he/she will also be able to access your funds added to existing addresses after that point in time. This is often overlooked. So there doesn't even need to be malware on your PC right now, instead it could already have happend weeks or months ago, depending on your wallet's age.

[Raoul Duke]

Well the plan was to split the 8 bitcoins up and send them to a number of smaller paper wallets when I received them but they were gone before I had the chance.

I'm assuming for now that guiminer-scrypt is just a false positive so I still have no idea how this has actually happened.

Yes, all Bitcoin mining softwares are detected by AV's. At least they warn you about it. It's expected.

Is that wallet a new one, created by Bitcoin-qt? Have you ever added private keys to it, private keys that you took from someplace and forgot to label them as such and now you used that address to get those coins?

If this is true, someone should report this to moderators and warn other people

What can the moderators do? As for warning other people, well, you have this thread. But I'm not quite sure what you want to warn them about. He received Bitcoins at one address and they were sent out of that address 1 hour later or so, maybe when the other person who owns the same address private key noticed he had 8 BTC more than supposed.

[rausvi15]

Yes.

To: 1KusYRu9VZg9Eu7xKhsPdqcatp335GGqDd
Credit: 8.00 BTC
Net amount: +8.00 BTC
Transaction ID: cbfda0aa018ce2c8267c05ca8d860044cddd9e93f0bae15325a3b06223894fb1

To: 112yc6EZchSiwyeCbQ7fXjSFzbh7htxg5j
Debit: -8.00 BTC
Net amount: -8.00 BTC
Transaction ID: 218f6dad46fb224b14b002309236dcfd2409061e9c02f6ce85380a82051b1c18

check transactions...
https://blockchain.info/sl/address/1KusYRu9VZg9Eu7xKhsPdqcatp335GGqDd
whois,...

[cookiemonster84]

i think there is a nother thread here with thefts.... you could post on it to let ppl know

[ReCat]

People here have to realize that the vulnerability is not the bitcoin network in itself, but rather the habits of the guy who owned the wallet he send bitcoins to. The only error here was human error.

I'm sorry for your loss, by the way.

[lostmyshit]

People here have to realize that the vulnerability is not the bitcoin network in itself, but rather the habits of the guy who owned the wallet he send bitcoins to. The only error here was human error.

I'm sorry for your loss, by the way.

thanks why I think, ironically, bitcoin will take off when there are 'bitcoin banks' that insure your coins

[Gator-hex]

Malware bytes picked up guiminer-scrypt, which was downloaded from mirror 2 in this thread
https://bitcointalk.org/index.php?topic=150331.0

Hitman Pro has picked up cgminer-fpgaonly.exe and cgminer.exe from the same download.

Are these false positives?

I'm gutted $700 is a lot of money for me.

  NEVER EVER STORE YOUR COIN WALLET ON THE SAME MACHINE YOU MINE ON!  

False positive my ass!  

[georgeberz]

To go forward what about a biometric lock... fingerprint scanners are getting really cheap, and or a credit card reader modded to use bit coins....

Just my .02

George

[Gator-hex]

To go forward what about a biometric lock... fingerprint scanners are getting really cheap, and or a credit card reader modded to use bit coins....

Just my .02

George

Just get a big usb memory stick and boot linux (ubuntu etc.) from it, use it only for accessing your bitcoin wallet, throw it in a fire proof safe when you're done.

[Dabs]

Those transactions happened like this:

Received Time    2013-04-15 07:31:48
Included In Blocks    231434 (2013-04-15 07:36:05 +4 minutes)

Received Time    2013-04-15 08:38:02
Included In Blocks    231447 (2013-04-15 09:32:20 +54 minutes)

The coins were sent 13 blocks later or about 2 hours (or according to the time only 1 hour later.)

Does your bitcoin-qt have a password?

Lesson of the day. For new coins, use brand new addresses from brand new wallets. Either discard old ones, or consolidate all of them into an old-wallet.dat file just for checking purposes (if someone sends you coins to those old addresses.)

You can use pywallet to merge wallets, I think, and you should have no problem with wallets that are 10,000 keys big. But you wouldn't want to use that for your personal money. You'd just want to check those once a month maybe. Or less often.

[KatiHahnA]

call CSI

[Bailbonds]