PLEASE HELP! 40 Litecoins stolen out of LOCAL wallet!!!

[zombo]

Okay, so I have a local litecoin wallet, and I have P2Pool running on my system. Also ScryptMiner (for CPU mining)
I have several machines mining to this "server" which runs P2Pool and the litecoin wallet.
I transferred most of my coins over to this wallet from exchanges/other pools to store them "safely", I woke up this morning to find a rouge transaction taking 40.10 coins (my total balance at time of transaction) to a random Litecoin address. I DID NOT make this transaction as I was asleep!
How can someone possibly make this transaction? is litecoin bogus? is p2pool a scam? Wouldn't they have to physically enter my "server" to make a transaction in this wallet?
PLEASE help, any advice would be SO GREAT!

https://i.imgur.com/PuJSlav.png

[zombo]

I posted to Reddit lots of info there.

http://www.reddit.com/r/litecoin/comments/1cepps/local_wallet_somehow_hacked_and_all_coins_stolen/

Transaction info:

Status: 133 confirmations, broadcast through 2 nodes Date: 16/04/2013 02:13 To: LeXB64N2KPESTbj8QWhmXD3Bkr2fHkuFbh Debit: -38.00 LTC Transaction fee: -2.10 LTC Net amount: -40.10 LTC Transaction ID: 15331efd9959b818309060e35417c7f2f007ea6fead27e15ede8c723adb4bc3c

[jwzguy]

You need to have your wallet encrypted. If your wallet has been compromised, you need to create a new one and encrypt that. Ideally on a machine that isn't compromised. Encrypting your current wallet does no more good than the proverbial shutting of the stable door after the horses have bolted.

[zombo]

Thanks have encrypted a new wallet, but still what the heck happened?!

[pekv2]

Yes, one of the first things that should have been done, was a wallet encryption. Best thing the developers ever implemented.

[Shevek]

Thanks have encrypted a new wallet, but still what the heck happened?!

Possibly, a trojan.

It doesn't need to come with your litecoin/p2pool software.

Other advice: forget about windows OS and use a decent one.

[lophie]

Windose LUser ha ha ha, Well.... you live and learn.... dump that inferior OS!

[Kaiji]

Would a decent up to date antivirus help prevent this type of theft?

[lophie]

Would a decent up to date antivirus help prevent this type of theft?

Humans are always the weakest link in a security model. Upgrade yourself and learn basic security practices. Profit!

[Matoking]

Did you run any suspicious Java applets? A bunch of pages have been floating around that claim to be Java chat rooms or "Mt. Gox accepting Litecoin"-type announcements that also request you to run a Java applet.

[xorxor]

if you use this wallet as a base for many miners, you have RPC open

rpcuser=xxxx
rpcpassword=xxxxxx
rpcport=8332

you have to:

not redirect rpc port on router, or blok it for non-locals in firewall
set good long pasword
add rpcallowip=10.0.0.* or rpcallowip=192.168.0.* depending on your LAN config.

but most important thing is encrypting wallet!!!!!!!!!!

[Shad3dOne]

sorry for your loss.

Thank you for posting and letting others know and learn.

Gotta always protect the mcNuggets!!!

[bitrainbow]

create a cold wallet - use armory - it has lots of good reviews form everyone - some how to:

https://bitcointalk.org/index.php?topic=155074.0